Senior GRC Specialist, Customer Trust

Atlanta, GA

JFrog

The JFrog Platform gives you an end-to-end pipeline to control the flow of your binaries from build to production. Power your software updates to the edge

View company page

At JFrog, we’re reinventing DevOps to help the world’s greatest companies innovate -- and we want you along for the ride. This is a special place with a unique combination of brilliance, spirit and just all-around great people. Here, if you’re willing to do more, your career can take off. And since software plays a central role in everyone’s lives, you’ll be part of an important mission. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production -- a concept we call “liquid software.” Wouldn't it be amazing if you could join us in our journey?

We are seeking a Senior GRC Specialist, Customer Trust to join our growing GRC Team in Atlanta, Georgia.

In this role, you will support our sales, legal, and business colleagues through various GRC, Customer Trust oriented projects and initiatives including completing customer security assessments and audits of JFrog, working with the Legal team to negotiate security terms in contracts, meeting with customers directly to discuss JFrog’s security posture, and creating enablement materials to make sales teams and our customers successful as it relates to security & compliance. Additionally, this role will help build these competencies in the rest of the team and develop the maturity and scale of the Customer Trust program. 

This is a great opportunity to work closely with technical stakeholders to further build and scale our global customer-facing side Information Security and GRC programs. We are looking for a team player who brings a thoughtful, pragmatic mindset to overcoming challenges.

As a Senior GRC Specialist, Customer Trust in JFrog you will...

  • Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
  • Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the sales team to efficiently respond to compliance inquiries from prospective and existing customers.
  • Collaborate with cross-functional teams to support and enhance the overall GRC program.
  • Provide legal, sales, and marketing departments with technical security guidance regarding regulatory and data protection requirements.
  • Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
  • Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
  • Implement improvements and updates to the program based on regulatory changes and customer requirements.
  • Participating in risk assessment and risk management processes. 

To be a Senior GRC Specialist, Customer Trust in JFrog you need...

  • Minimum 5 years as an Information Security or Cyber Security GRC specialist, expert or consulting.
  • Deep understanding and hands-on experience with the security side of pre-sales and post-sales (customer security assessments, onsite audits, contract negotiations, etc)
  • Strong knowledge and hands-on experience with ISO 27001 and SOC 2 Type II 
  • Familiarity with additional security frameworks as well as privacy regulations and standards (NIST, CSA, CAIQ, SIG, GDPR, CCPA, ISO 27701) is an advantage.
  • Experience reviewing and redlining information security addendums
  • An excellent ability to communicate verbally and in writing
  • Ability to work on multiple projects simultaneously
  • Project management skills
  • Self-driven and fast learner with a can-do approach
  • Passionate about the team and responsibilities
  • Willingness to work a flexible schedule based on department and company needs. 
  • Experience auditing cloud environments
  • Experience working with regulators and auditors
  • Experience working with GRC tools

WHAT JFROG CAN OFFER…

  • At JFrog, base salary is only one component of our compensation package.
  • This position has a base salary range between $145,000 to $160,000.  Base salary will be based on your skills, qualifications, experience and location.
  • This position also includes an equity package of restricted stock units (RSU).  In addition, JFrog employees are eligible to participate in our Employee Stock Purchase Plan.
  • JFrog provides employees comprehensive benefits including medical, dental, vision, retirement, wellness and much more!
  • JFrog embraces hybrid work: 3 days in office / 2 days remote.
  • Additionally, this role may be eligible for discretionary bonuses or commission payments.

JFrog is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status or any other category protected by law.

Apply now Apply later
  • Share this job via
  • or

Tags: Audits CCPA Cloud Compliance DevOps GDPR ISO 27001 NIST Privacy Risk assessment Risk management Security assessment SOC SOC 2

Perks/benefits: Equity Flex hours Health care Wellness

Region: North America
Country: United States
Job stats:  6  2  0
Category: Compliance Jobs

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.