Your mission
Trust is what enables the world's leading brands to build on Frontify. Behind that trust is our Security Governance team, ensuring our security is not only effective, but also measurable, demonstrable, and easy for customers and auditors to verify. Our work spans compliance, regulatory oversight, customer security assurance, vendor risk management, security policy management, awareness, and enterprise risk management.
A key focus of the role is driving the next stage of our security governance maturity. Today, too many governance activities still rely on collecting evidence, chasing screenshots, and preparing spreadsheets for audits. You'll help transform that by introducing automation and AI into our governance processes, enabling continuous evidence collection, automated control monitoring, and more efficient audit readiness. This creates more space for the team to focus on the areas where human expertise, critical thinking, and sound judgment create the greatest value.
Your responsibilities
You'll own customer security assurance, ensuring enterprise security questionnaires, due diligence requests, and audit inquiries are handled accurately, consistently, and efficiently, helping customers make informed decisions while supporting commercial success.
You'll drive the day-to-day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
You'll serve as the subject matter expert during audits and ensure our control environment remains effective and audit-ready.
You'll help transform compliance from a point-in-time activity into a continuous process by introducing automation and AI into our Vanta-based GRC program. This includes improving evidence collection, control monitoring, and access review processes.
You'll design and improve AI-enabled GRC workflows, leveraging LLMs to streamline policy management, documentation, risk assessments, and other governance activities while ensuring appropriate governance and human oversight.
You'll strengthen Frontify's vendor risk management program by scaling security assessments through automation while ensuring higher-risk vendors receive appropriate human review.
You'll contribute to the continuous improvement of Frontify's security awareness program by helping employees build practical security knowledge rather than simply completing mandatory training.
Your story
You’re comfortable working in a hybrid format, with the ability to come to our St. Gallen office once per week.
You have 5+ years of experience in information security governance, GRC, or technology risk within a SaaS or cloud environment.
You've been the subject matter expert in SOC 2 and/or ISO 27001 audits — not just supporting them, but working directly on controls and partnering with auditors. Experience with additional frameworks such as TISAX or Microsoft SSPA is a plus.
You're hands-on with modern GRC platforms (we run Vanta and Conveyor), and you instinctively reach for automation over manual effort.
- You think entrepreneurially, embrace new technologies, and challenge the status quo to drive meaningful improvements.
You're genuinely excited about applying AI to compliance work, and you can tell the difference between where it accelerates you and where human judgment still matters.
You communicate risk clearly to both technical and business audiences, and you enjoy helping those around you do their best work.
A relevant certification (CISA, CISM, CISSP, CIPP, or similar) is a plus.
You speak English fluently. German is a plus.
Skills Required
- 5+ years experience in information security governance, GRC, or technology risk within a SaaS or cloud environment.
- Direct subject matter experience working on SOC 2 and/or ISO 27001 controls and audits.
- Hands-on experience with modern GRC platforms (Vanta and Conveyor).
- Experience introducing automation and AI into GRC/compliance processes (continuous evidence collection, automated control monitoring).
- Ability to work hybrid and attend the St. Gallen office approximately once per week.
- Fluency in English.
- Ability to communicate risk clearly to technical and business audiences.
- Experience with TISAX or Microsoft SSPA.
- Relevant certification (CISA, CISM, CISSP, CIPP, or similar).
- German language skills.
Frontify Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Frontify and has not been reviewed or approved by Frontify.
-
Leave & Time Off Breadth — Policies include a minimum of five weeks of paid vacation, flexible hours, and hybrid/remote options. Feedback suggests time away and flexibility are consistently highlighted as strengths.
-
Healthcare Strength — U.S. employees receive comprehensive medical, dental, and vision coverage, and all employees have access to dedicated mental-health support. Location-specific medical offerings (e.g., UK private medical and cashback plans) reinforce core health coverage.
-
Parental & Family Support — Paid parental leave, lactation accommodations, and family-friendly scheduling are explicitly provided. Childcare benefits and supportive leave structures indicate meaningful backing for parents and caregivers.
Frontify Insights
What We Do
With our best-in-class brand management platform, Frontify is on a mission to create a home where all brands can thrive. We envision a world where all teams and workforces, big and small, are empowered and engaged to be a part of building beloved brands.
Why Work With Us
Our community is spread across the world but we are always brought together by our shared values. At Frontify, we aim to stay united, be authentic, improve ourselves, and thrive together as a team.
Gallery
