GRC Manager

📋 Description

• Lead and develop GRC team members, including the GRC Specialist, by establishing priorities
• Own and mature key components of JFrog’s global GRC program, ensuring governance, policies
• Manage and support security certifications, attestations, and compliance programs, including ISO
• Lead internal and external audit activities, coordinating evidence collection, stakeholder
• Lead and mature the Third-Party Risk Management (TPRM) program, overseeing third-party security
• Drive policy and control governance, ensuring JFrog policies, procedures, standards, and controls

🎯 Requirements

• 5+ years of experience in cybersecurity governance, risk, compliance, security assurance, audit, or
• Prior experience leading or managing GRC professionals, projects, or significant cross-functional
• Strong hands-on knowledge of ISO 27001 and SOC 2 Type II, including experience supporting or
• Strong knowledge of cybersecurity and risk-management frameworks such as NIST, ISO 27001/27002, CSA
• Familiarity with privacy and regulatory requirements such as GDPR, CCPA/CPRA, and ISO 27701.
• Experience performing or managing cybersecurity risk assessments, documenting risks, working with