GRC Manager: Compliance, Risk & Trust Leader

JFrog Ltd; United States; Presencial; USD 130.000 - 185.000; Jornada completa

Descripción de la vacante

JFrog Ltd. is seeking an experienced GRC Manager to lead governance, risk, and compliance across the organization.

You will manage the GRC team, own key controls and certifications such as ISO 27001 and SOC 2 Type II, and partner with Security, Legal, IT, and Finance to ensure a scalable, risk-based compliance program. You will drive audit readiness, third-party risk management, and policy governance while communicating complex requirements to technical and business stakeholders.

Formación

• 5+ years of experience in cybersecurity governance, risk, compliance, security assurance, audit, or related field.
• Experience leading GRC professionals or cross-functional compliance initiatives.
• Strong knowledge of ISO 27001 and SOC 2 Type II and audits.
• Familiarity with GDPR/CCPA and ISO 27701.
• Ability to translate regulatory requirements into practical business solutions.

Responsabilidades

• Lead and develop GRC team members and set priorities.
• Own and mature components of the global GRC program.
• Manage security certifications, attestations, and compliance programs.
• Lead internal and external audit activities and remediation.
• Oversee Third-Party Risk Management program.
• Drive policy and control governance and automation initiatives.

Conocimientos

GRC governance

Risk management

Compliance programs

Audit readiness

Leadership

Project management

Educación

Bachelor's degree in a related field

Herramientas

ISO 27001 Lead Auditor

SOC 2 Type II

GRC platforms

Descripción del empleo

JFrog Ltd. is seeking an experienced GRC Manager to lead governance, risk, and compliance across the organization.

You will manage the GRC team, own key controls and certifications such as ISO 27001 and SOC 2 Type II, and partner with Security, Legal, IT, and Finance to ensure a scalable, risk-based compliance program. You will drive audit readiness, third-party risk management, and policy governance while communicating complex requirements to technical and business stakeholders.