AI-Driven Security Governance Specialist

Frontify AG. “Frontify” is a registered trademark of Frontify AG; Sankt Gallen; Hybrid; CHF 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

25 days annual leave

Pension fund

Home office setup budget

Workation up to 45 days

Zusammenfassung

Frontify is seeking an experienced Information Security Governance expert to lead enterprise-grade governance, compliance programs, and audit readiness. You will drive automation across GRC processes, collaborate with auditors, and advance the maturity of our security controls.

Ideal candidates bring 5+ years in SaaS/cloud risk, SAAS security experience, and a proactive, entrepreneurial approach to applying AI in compliance workflows, while communicating risk clearly to technical and business

Qualifikationen

• 5+ years of experience in information security governance, GRC, or technology risk in SaaS/cloud environments.
• Experience leading SOC 2 and ISO 27001 audits as a SME, not just supporting them.
• Hands-on with GRC platforms and automation to drive efficiencies.

Aufgaben

• Own customer security assurance, handling enterprise security questionnaires and audits.
• Manage day-to-day operation and continuous improvement of compliance programs (ISO 27001, SOC 2, TISAX).
• Serve as SME during audits and ensure control environment is audit-ready.
• Introduce automation/AI into GRC processes and evidence collection.
• Design AI-enabled GRC workflows for policy management and risk assessments.
• Scale vendor risk assessments with automation while ensuring critical reviews.

Kenntnisse

Information security governance

GRC

Technology risk

Automation mindset

SOC 2 audits

ISO 27001 audits

Ausbildung

Security certifications (CISA/CISM/CISSP/CIPP)

Tools

Vanta

Conveyor

Jobbeschreibung

Frontify is seeking an experienced Information Security Governance expert to lead enterprise-grade governance, compliance programs, and audit readiness. You will drive automation across GRC processes, collaborate with auditors, and advance the maturity of our security controls.

Ideal candidates bring 5+ years in SaaS/cloud risk, SAAS security experience, and a proactive, entrepreneurial approach to applying AI in compliance workflows, while communicating risk clearly to technical and business