GRC Specialist

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey? We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you! As a GRC specialist at JFrog you will... • Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements. • Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers. • Collaborate with cross-functional teams to support and enhance the overall GRC program. • Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards. • Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly. • Implement improvements and updates to the program, based on regulatory changes and customer requirements. • Participate in risk assessment and risk management processes.  To be a GRC specialist at JFrog you need... • Minimum 1-2 years as a cyber security / GRC specialist, expert, or consultant • Strong knowledge and hands-on experience with ISO 27001 and SOC 2 Type II  • Familiarity with additional security frameworks as well as privacy regulations and standards (NIST, CSA, CAIQ, SIG, GDPR, CCPA, ISO 27701) is an advantage. • An excellent ability to communicate verbally and in writing • Ability to work on multiple projects simultaneously • Project management skills • Self-driven and fast learner with a can-do approach • Passionate about the team and responsibilities • Experience with auditing cloud environments • Experience in working with regulators and auditors • Experience in working with GRC tools