FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Security Governance Specialist
FrontifyInformation Security Governance Specialist at Frontify ensuring compliance and governance in a dynamic SaaS environment. Driving automation and security assurance processes whilst working in a hybrid setup.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in information security governance and compliance, with a focus on ISO 27001 and SOC 2 audits. Proficient in leveraging AI and automation to enhance compliance processes and vendor risk management.
Highest-signal resume keywords
Information Security GovernanceISO 27001 Audit ExpertiseSOC 2 Audit ExpertiseGRC Platform ProficiencyRisk Communication
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security GovernanceGRCCompliance ProgramsAudit ReadinessVendor Risk ManagementAI in ComplianceSecurity AssessmentsContinuous ImprovementAutomationSecurity Awareness Programs
Soft Skills
Clear CommunicationEntrepreneurial Thinking
Tools & Technologies
VantaConveyor
Certifications & Qualifications
CISACISMCISSPCIPP
Industry Keywords
SaaSCloud EnvironmentTISAX
Tech Stack
Tools & technologiesCloud
About the role
Key responsibilities & impact- Own customer security assurance, ensuring enterprise security questionnaires, due diligence requests, and audit inquiries are handled accurately
- Drive the day-to-day operation and continuous improvement of compliance programs, including ISO 27001, SOC 2, TISAX
- Serve as subject matter expert during audits and ensure audit readiness
- Transform compliance from point-in-time activity to continuous process with automation and AI
- Design and improve AI-enabled GRC workflows
- Strengthen vendor risk management program by scaling security assessments
- Contribute to the continuous improvement of security awareness program
Requirements
What you’ll need- 5+ years of experience in information security governance, GRC, or technology risk within a SaaS or cloud environment
- Subject matter expert in SOC 2 and/or ISO 27001 audits
- Hands-on with modern GRC platforms (Vanta and Conveyor)
- Entrepreneurial thinking and embrace of new technologies
- Excited about applying AI to compliance work
- Clear communication of risk to technical and business audiences
- Relevant certification (CISA, CISM, CISSP, CIPP, or similar) is a plus
- Fluency in English, German is a plus
Benefits
Comp & perks- Private health benefits and health cash plan
- Pension scheme: 5% matched
- A minimum of 25 days of annual leave per year
- Paid educational and wellbeing days off
- Wellbeing, learning and development, and commuter allowance
- Home office setup budget
- Weekly free office lunch
- Localized benefits
- Workation: Work from inspiring locations around the world (45 days annually)
- Invite to our summer company meet-up