AI-Driven Security Governance & GRC Specialist

Frontify; Sankt Gallen; Hybrid; CHF 140.000 - 190.000; Vollzeit

Benefits dieser Stelle

25 days annual leave

Parental leave

Pension fund contributions

Zusammenfassung

Frontify, headquartered in St. Gallen with offices in London and New York, is seeking a seasoned Information Security Governance professional. You will own the governance of security programs, drive automation and AI in GRC, and partner with auditors to ensure trust with customers and stakeholders.

You’ll work in a hybrid setup, attending the St. Gallen office weekly, collaborating across teams to elevate our compliance posture and risk management in a SaaS environment.

Qualifikationen

• 5+ years of experience in information security governance, GRC, or technology risk within a SaaS or cloud environment.
• Experience as subject‑matter expert in SOC 2 and ISO 27001 audits.
• Hands-on with modern GRC platforms (Vanta and Conveyor).
• Strong automation mindset and ability to apply AI to governance processes.
• Fluent in English; German is a plus.

Aufgaben

• Own customer security assurance, ensuring questionnaires and audit inquiries are handled accurately and efficiently.
• Drive day-to-day operation and continuous improvement of compliance programs (ISO 27001, SOC 2, TISAX).
• Serve as subject‑matter expert during audits and ensure the control environment is audit-ready.
• Transform compliance into a continuous process by introducing automation and AI into GRC workflows.
• Design and improve AI-enabled GRC workflows, leveraging LLMs for policy management and risk assessments.
• Strengthen vendor risk management by scaling assessments through automation.
• Contribute to continuous improvement of security awareness programs.

Kenntnisse

Information security governance

GRC

Automation

Risk communication

Tools

Vanta

Conveyor

Jobbeschreibung

Frontify, headquartered in St. Gallen with offices in London and New York, is seeking a seasoned Information Security Governance professional. You will own the governance of security programs, drive automation and AI in GRC, and partner with auditors to ensure trust with customers and stakeholders.

You’ll work in a hybrid setup, attending the St. Gallen office weekly, collaborating across teams to elevate our compliance posture and risk management in a SaaS environment.