Frontify

3 days ago

Information Security Governance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Own customer security assurance and handle enterprise security questionnaires, due diligence requests, and audit inquiries. Drive daily operations and continuous improvement of governance programs across ISO 27001, SOC 2, TISAX, and emerging regulations. Serve as the subject matter expert during audits, strengthen vendor risk management, and modernize GRC using automation and AI in Vanta-based workflows—while ensuring appropriate human oversight.

Location: Switzerland

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own customer security assurance by ensuring security questionnaires, due diligence requests, and audit inquiries are handled accurately and efficiently.
•Drive daily operations and continuous improvement of compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
•Serve as the subject matter expert during audits and ensure the control environment remains effective and audit-ready.
•Transform GRC from point-in-time evidence gathering into a continuous process using automation and AI for evidence collection, control monitoring, and access review in a Vanta-based program.
•Design and improve AI-enabled GRC workflows using LLMs and strengthen vendor risk management with automated security assessments plus human review for higher-risk vendors.

Pay and Benefits

Perks:Annual LeaveParental LeaveAccident InsuranceHome OfficePension Fund

Key Requirements

•5+ years of experience in information security governance, GRC, or technology risk in a SaaS or cloud environment.
•Subject matter expertise in SOC 2 and/or ISO 27001 audits, including working directly on controls and partnering with auditors.
•Hands-on experience with modern GRC platforms, including Vanta and/or Conveyor, with a preference for automation.
•Ability to communicate risk clearly to both technical and business audiences.
•Relevant certification (CISA, CISM, CISSP, CIPP, or similar) is a plus.

Experience:SaaSCloud

Skills:Risk communicationContinuous improvementCritical thinkingHuman judgmentStakeholder collaboration

Certifications:CISACISMCISSPCIPP

Languages:EnglishGerman

Tech Stack:VantaConveyorISO 27001SOC 2TISAXVanta-based GRCLLMsMicrosoft SSPA

Company Brief

Frontify

Provides a cloud-based brand management platform that helps companies centralize brand assets, design systems, guidelines, and collaboration tools to ensure consistent brand experiences across teams and channels.

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series B

Headquarters: St. Gallen, Switzerland

Founded: 2013

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Frontify

3 days ago

Information Security Governance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: Switzerland

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own customer security assurance by ensuring security questionnaires, due diligence requests, and audit inquiries are handled accurately and efficiently.
•Drive daily operations and continuous improvement of compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
•Serve as the subject matter expert during audits and ensure the control environment remains effective and audit-ready.
•Transform GRC from point-in-time evidence gathering into a continuous process using automation and AI for evidence collection, control monitoring, and access review in a Vanta-based program.
•Design and improve AI-enabled GRC workflows using LLMs and strengthen vendor risk management with automated security assessments plus human review for higher-risk vendors.

Pay and Benefits

Perks:Annual LeaveParental LeaveAccident InsuranceHome OfficePension Fund

Key Requirements

•5+ years of experience in information security governance, GRC, or technology risk in a SaaS or cloud environment.
•Subject matter expertise in SOC 2 and/or ISO 27001 audits, including working directly on controls and partnering with auditors.
•Hands-on experience with modern GRC platforms, including Vanta and/or Conveyor, with a preference for automation.
•Ability to communicate risk clearly to both technical and business audiences.
•Relevant certification (CISA, CISM, CISSP, CIPP, or similar) is a plus.

Experience:SaaSCloud

Skills:Risk communicationContinuous improvementCritical thinkingHuman judgmentStakeholder collaboration

Certifications:CISACISMCISSPCIPP

Languages:EnglishGerman

Tech Stack:VantaConveyorISO 27001SOC 2TISAXVanta-based GRCLLMsMicrosoft SSPA

Company Brief

Frontify

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series B

Headquarters: St. Gallen, Switzerland

Founded: 2013

Website LinkedIn