{"id":2493516,"url":"https://alion.io/job/jfrog-grc-manager","title":"GRC Manager","company":{"id":7027,"name":"JFrog","domain":"jfrog.com","url":"https://alion.io/company/jfrog","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":14,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel","Netanya, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":237000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-13T10:07:58Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-15T03:19:32Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production - a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey?\nWe are seeking an experienced GRC Manager (Governance, Risk, and Compliance) to lead and mature key areas of JFrog’s global Governance, Risk, and Compliance program. This role will manage members of the GRC team, including the GRC Specialist, and will be responsible for driving JFrog’s corporate compliance, customer assurance, risk management, audit readiness, and trust programs. The GRC Manager will work closely with Security, IT, Legal, Privacy, Sales, R&D, Finance, Internal Audit, and other business stakeholders to ensure JFrog maintains a scalable, risk-based compliance program that supports both regulatory obligations and customer expectations. The ideal candidate combines strong cybersecurity and compliance expertise with leadership, business judgment, project management, and the ability to translate complex compliance requirements into practical business solutions.\nAs a GRC Manager at JFrog, you will...\nLead and develop GRC team members, including the GRC Specialist, by establishing priorities, providing guidance, reviewing deliverables, and supporting professional development.\nOwn and mature key components of JFrog’s global GRC program, ensuring governance, policies, controls, risk-management activities, and compliance processes remain effective and scalable as the company grows.\nManage and support security certifications, attestations, and compliance programs, including ISO 27001, SOC 2 Type II, and other applicable industry and regulatory frameworks.\nLead internal and external audit activities, coordinating evidence collection, stakeholder participation, remediation activities, and responses to auditors, assessors, customers, and other external parties.\nLead and mature the Third-Party Risk Management (TPRM) program, overseeing third-party security assessments, risk identification and treatment, remediation tracking, risk acceptance, ongoing monitoring, and reporting to ensure third-party risks are appropriately identified and managed.\nDrive policy and control governance, ensuring JFrog policies, procedures, standards, and controls remain aligned with applicable regulatory requirements, contractual commitments, business objectives, and industry best practices.\nPartner with Sales and customer-facing organizations to improve compliance enablement, develop reusable resources, to help the Customer Trust team efficiently respond to security and compliance requirements from prospective and existing customers.\nIdentify opportunities to automate and scale GRC processes, including the use of GRC platforms, trust-center technologies, workflow automation, and AI-enabled solutions.\nMonitor regulatory, industry, and customer-driven changes and assess their potential impact on JFrog's compliance obligations, controls, and GRC roadmap.\nEstablish and track GRC metrics and KPIs, providing management with visibility into compliance posture, audit findings, customer assurance activities, risks, remediation efforts, and program maturity.\nDrive remediation efforts across the organization, working with control owners to ensure identified gaps, audit findings, risks, and corrective actions are appropriately prioritized and resolved.\nServe as a trusted GRC advisor to business and technical stakeholders, translating complex regulatory and compliance requirements into practical, risk-based recommendations.\nSupport the continued development of JFrog’s global compliance strategy, identifying emerging risks, customer requirements, and opportunities to strengthen the organization’s security and compliance posture.\nTo be a GRC Manager at JFrog, you need...\n5+ years of experience in cybersecurity governance, risk, compliance, security assurance, audit, or a related field, with increasing levels of responsibility.\nPrior experience leading or managing GRC professionals, projects, or significant cross-functional compliance initiatives.\nStrong hands-on knowledge of ISO 27001 and SOC 2 Type II, including experience supporting or leading audits and certification activities.\nStrong knowledge of cybersecurity and risk-management frameworks such as NIST, ISO 27001/27002, CSA CCM/CAIQ, SIG, and related industry standards.\nFamiliarity with privacy and regulatory requirements such as GDPR, CCPA/CPRA, and ISO 27701.\nExperience performing or managing cybersecurity risk assessments, documenting risks, working with risk owners, and tracking remediation.\nExperience working with external auditors, assessors, customers, regulators, and internal stakeholders.\nStrong understanding of cloud environments and SaaS security and compliance considerations.\nExperience implementing, administering, or optimizing GRC, trust-center, audit-management, or compliance automation tools.\nDemonstrated ability to manage multiple complex initiatives simultaneously and drive projects to completion across geographically distributed teams.\nExcellent written and verbal communication skills, including the ability to communicate cybersecurity and compliance topics to technical teams, business leaders, customers, and executives.\nStrong analytical, organizational, and project-management skills.\nA self-driven, collaborative approach with the ability to operate effectively in a fast-paced and rapidly evolving technology environment.\nProfessional certifications such as CISA, CISM, CRISC, CISSP, CCSK, ISO 27001 Lead Auditor/Lead Implementer, or similar certifications - An Advantage\nExperience working within a global SaaS, cloud, cybersecurity, or DevSecOps organization - An Advantage\nExperience with additional compliance frameworks or regulations, such as PCI DSS, NIST CSF, NIST 800-53, FedRAMP, CMMC, DORA, NIS2, or the EU Cyber Resilience Act - An Advantage\nExperience building or scaling GRC programs in a rapidly growing global organization - An Advantage\nExperience with compliance automation, AI-enabled GRC tools, trust-center platforms, and continuous control monitoring - An Advantage\nExperience partnering directly with enterprise Sales, Legal, Product, Engineering, and Security teams - An Advantage","description_format":"text","description_chars":6657,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Security Compliance","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-10-14T03:54:17Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/jfrog-grc-manager","json_url":"https://alion.io/job/jfrog-grc-manager.json","meta":{"generated_at":"2026-10-15T03:26:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4893,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7027},"rest":"https://alion.io/mcp/rest/get_company?id=7027"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjfrog-grc-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjfrog-grc-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjfrog-grc-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jfrog-grc-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjfrog-grc-manager"}]}