GRC Specialist

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey?

We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you!

• Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
• Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers.
• Collaborate with cross-functional teams to support and enhance the overall GRC program.
• Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
• Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
• Implement improvements and updates to the program, based on regulatory changes and customer requirements.
• Participate in risk assessment and risk management processes. 

• Minimum 1-2 years as a cyber security / GRC specialist, expert, or consultant
• Strong knowledge and hands-on experience with ISO 27001 and SOC 2 Type II 
• Familiarity with additional security frameworks as well as privacy regulations and standards (NIST, CSA, CAIQ, SIG, GDPR, CCPA, ISO 27701) is an advantage.
• An excellent ability to communicate verbally and in writing
• Ability to work on multiple projects simultaneously
• Project management skills
• Self-driven and fast learner with a can-do approach
• Passionate about the team and responsibilities
• Experience with auditing cloud environments
• Experience in working with regulators and auditors
• Experience in working with GRC tools