Information Security Governance Specialist

Salary: £48,000 - 78,000 per year

Requirements:

• You are comfortable working in a hybrid format, with the ability to come to our London office once per week.
• You have 5+ years of experience in information security governance, GRC, or technology risk within a SaaS or cloud environment.
• Youve been the subject matter expert in SOC 2 and/or ISO 27001 audits, working directly on controls and partnering with auditors.
• Experience with additional frameworks such as TISAX or Microsoft SSPA is a plus.
• Youre hands-on with modern GRC platforms; we run Vanta and Conveyor.
• You instinctively reach for automation over manual effort.
• You think entrepreneurially, embrace new technologies, and challenge the status quo.
• Youre genuinely excited about applying AI to compliance work, and you understand where it helps and where human judgment still matters.
• You communicate risk clearly to both technical and business audiences.
• A relevant certification such as CISA, CISM, CISSP, CIPP, or similar is a plus.
• You speak English fluently; German is a plus.

Responsibilities:

• Own customer security assurance, ensuring enterprise security questionnaires, due diligence requests, and audit inquiries are handled accurately, consistently, and efficiently.
• Drive the day-to-day operation and continuous improvement of our compliance programs, including ISO 27001, SOC 2, TISAX, and emerging regulatory requirements.
• Serve as the subject matter expert during audits and ensure our control environment remains effective and audit-ready.
• Help transform compliance from a point-in-time activity into a continuous process by introducing automation and AI into our Vanta-based GRC program.
• Improve evidence collection, control monitoring, and access review processes.
• Design and improve AI-enabled GRC workflows, leveraging LLMs to streamline policy management, documentation, risk assessments, and other governance activities while ensuring appropriate governance and human oversight.
• Strengthen our vendor risk management program by scaling security assessments through automation while ensuring higher-risk vendors receive appropriate human review.
• Contribute to the continuous improvement of our security awareness program by helping employees build practical security knowledge rather than simply completing mandatory training.

Technologies:

• AI
• Cloud
• Support
• Security
• Slack

More:

Frontify is a brand platform that helps teams organize digital assets, collaborate on projects, and create engaging campaigns. We support thousands of marketers and designers, including teams at Uber, Microsoft, Volkswagen, and Telefónica, and we are headquartered in St. Gallen, Switzerland, with offices in London and New York City. Our culture is built on creativity, collaboration, inclusion, and joy. The role sits within our Information Security Office and Security Governance team, where we focus on security, pragmatism, and user friendliness. We offer private health benefits and a health cash plan, a pension scheme with 5% matched contributions, a minimum of 25 days of annual leave, paid educational and wellbeing days off, wellbeing and learning and development support, a commuter allowance, a home office setup budget, weekly free office lunch, localized benefits, 45 days of workation each year, and an invitation to our summer company meet-up. We are committed to an authentic and inclusive workplace and to providing a fair and accessible recruitment process.

last updated 35 week of 2026