GRC Manager
Core
Lead and mature JFrog's global Governance, Risk, and Compliance program, managing team members, driving compliance certifications, and supporting customer trust initiatives.
Role type
Senior GRC Manager (Security & Compliance)
Builds
Scalable, risk-based compliance program supporting regulatory obligations and customer expectations
Domain
Cybersecurity, Cloud Security, SaaS Compliance
Required skills
GRC program management, ISO 27001, SOC 2 Type II, NIST frameworks, risk assessment, audit coordination, third-party risk management, policy governance, compliance automation, stakeholder management
Preferred skills
CISA, CISM, CRISC, CISSP, CCSK, ISO 27001 Lead Auditor/Lead Implementer, GDPR, CCPA/CPRA, ISO 27701, cloud security, DevSecOps, compliance automation tools, trust-center platforms
Technologies
GRC platforms, trust-center technologies, workflow automation, AI-enabled solutions
Responsibilities
Lead and develop GRC team members; Own and mature key components of the global GRC program; Manage security certifications and attestations; Lead internal and external audit activities; Lead and mature the Third-Party Risk Management program; Drive policy and control governance; Partner with Sales to improve compliance enablement; Identify opportunities to automate GRC processes; Monitor regulatory changes; Establish and track GRC metrics and KPIs; Drive remediation efforts across the organization; Serve as a trusted GRC advisor; Support the development of the global compliance strategy
Seniority
Senior, hands-on IC with leadership responsibilities
