Frontify

3 days ago

Information Security Governance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Own customer security assurance and help streamline enterprise security questionnaires, due diligence, and audit inquiries. Drive continuous improvement of security governance and compliance programs spanning ISO 27001, SOC 2, and TISAX. Serve as a subject matter expert during audits, and modernize GRC by automating evidence collection, control monitoring, and access reviews using Vanta and AI-enabled workflows.

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own customer security assurance by ensuring security questionnaires, due diligence requests, and audit inquiries are handled accurately and efficiently.
•Drive the day-to-day operation and continuous improvement of compliance programs including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
•Act as the subject matter expert during audits and help ensure the control environment remains effective and audit-ready.
•Transform compliance into a continuous process by introducing automation and AI into a Vanta-based GRC program, improving evidence collection, control monitoring, and access review.
•Strengthen vendor risk management and security awareness by scaling security assessments with automation and improving employee security knowledge.

Pay and Benefits

Perks:Health InsurancePensionAnnual LeaveLearning BudgetCommuter BenefitsHome Office

Key Requirements

•5+ years of experience in information security governance, GRC, or technology risk in a SaaS or cloud environment.
•Subject matter expert experience in SOC 2 and/or ISO 27001 audits, working directly on controls and with auditors.
•Hands-on with modern GRC platforms, including Vanta (and comfort driving automation over manual work).
•Experience with additional frameworks such as TISAX or Microsoft SSPA is a plus.
•Relevant security certification (CISA, CISM, CISSP, CIPP, or similar) is a plus.

Experience:5+ yearsSaaSCloud

Skills:Risk communicationContinuous improvementStakeholder managementProblem-solving

Certifications:CISACISMCISSPCIPP

Languages:EnglishGerman

Tech Stack:VantaConveyorISO 27001SOC 2TISAXMicrosoft SSPAGRCLLMsAI

Company Brief

Frontify

Provides a cloud-based brand management platform that helps companies centralize brand assets, design systems, guidelines, and collaboration tools to ensure consistent brand experiences across teams and channels.

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series B

Headquarters: St. Gallen, Switzerland

Founded: 2013

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Frontify

3 days ago

Information Security Governance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own customer security assurance by ensuring security questionnaires, due diligence requests, and audit inquiries are handled accurately and efficiently.
•Drive the day-to-day operation and continuous improvement of compliance programs including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
•Act as the subject matter expert during audits and help ensure the control environment remains effective and audit-ready.
•Transform compliance into a continuous process by introducing automation and AI into a Vanta-based GRC program, improving evidence collection, control monitoring, and access review.
•Strengthen vendor risk management and security awareness by scaling security assessments with automation and improving employee security knowledge.

Pay and Benefits

Perks:Health InsurancePensionAnnual LeaveLearning BudgetCommuter BenefitsHome Office

Key Requirements

•5+ years of experience in information security governance, GRC, or technology risk in a SaaS or cloud environment.
•Subject matter expert experience in SOC 2 and/or ISO 27001 audits, working directly on controls and with auditors.
•Hands-on with modern GRC platforms, including Vanta (and comfort driving automation over manual work).
•Experience with additional frameworks such as TISAX or Microsoft SSPA is a plus.
•Relevant security certification (CISA, CISM, CISSP, CIPP, or similar) is a plus.

Experience:5+ yearsSaaSCloud

Skills:Risk communicationContinuous improvementStakeholder managementProblem-solving

Certifications:CISACISMCISSPCIPP

Languages:EnglishGerman

Tech Stack:VantaConveyorISO 27001SOC 2TISAXMicrosoft SSPAGRCLLMsAI

Company Brief

Frontify

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series B

Headquarters: St. Gallen, Switzerland

Founded: 2013

Website LinkedIn