AI-Driven Information Security Governance Lead

Frontify; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Private health benefits

Pension scheme

25 days annual leave

Education and wellbeing days

Commuter allowance

Work from anywhere (World travel)

Summer company meet-up

Job summary

Frontify is seeking an experienced Information Security Governance professional to own customer security assurance, drive compliance programs, and act as the SME during audits. The role emphasizes automating governance processes and applying AI to enhance evidence collection and control monitoring.

The ideal candidate has 5+ years in SaaS/cloud risk, with hands-on experience in SOC 2 and ISO 27001 audits, and familiarity with Vanta and Conveyor. Hybrid London-based role with global scope.

Qualifications

• 5+ years of information security governance, GRC, or technology risk in SaaS/cloud environments.
• Experience leading SOC 2 and ISO 27001 audits—directly on controls and with auditors.
• Hands-on with modern GRC platforms and a penchant for automation over manual work.

Responsibilities

• Own customer security assurance, handling enterprise security questionnaires and audit inquiries accurately and efficiently.
• Drive compliance programs (ISO 27001, SOC 2, TISAX) and stay ahead of regulatory requirements.
• Serve as SME during audits and ensure control environment remains effective and audit-ready.
• Lead automation and AI initiatives in Vanta-based GRC to improve evidence collection and monitoring.
• Design and improve AI-enabled GRC workflows for policy management, risk assessments, and governance activities.

Skills

Security governance

SOC 2 audits

ISO 27001 audits

GRC platforms

Automation

AI in governance

Risk communication

Education

CISA

CISM

CISSP

CIPP

Tools

Vanta

Conveyor

Job description

Frontify is seeking an experienced Information Security Governance professional to own customer security assurance, drive compliance programs, and act as the SME during audits. The role emphasizes automating governance processes and applying AI to enhance evidence collection and control monitoring.

The ideal candidate has 5+ years in SaaS/cloud risk, with hands-on experience in SOC 2 and ISO 27001 audits, and familiarity with Vanta and Conveyor. Hybrid London-based role with global scope.