At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey?
We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you!
As a GRC specialist at JFrog you will...
- Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
- Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers.
- Collaborate with cross-functional teams to support and enhance the overall GRC program.
- Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
- Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
- Implement improvements and updates to the program, based on regulatory changes and customer requirements.
- Participate in risk assessment and risk management processes.
To be a GRC specialist at JFrog you need...
- Minimum 1-2 years as a cyber security / GRC specialist, expert, or consultant
- Strong knowledge and hands-on experience with ISO 27001 and SOC 2 Type II
- Familiarity with additional security frameworks as well as privacy regulations and standards (NIST, CSA, CAIQ, SIG, GDPR, CCPA, ISO 27701) is an advantage.
- An excellent ability to communicate verbally and in writing
- Ability to work on multiple projects simultaneously
- Project management skills
- Self-driven and fast learner with a can-do approach
- Passionate about the team and responsibilities
- Experience with auditing cloud environments
- Experience in working with regulators and auditors
- Experience in working with GRC tools
