IT, Security & Compliance Lead (On-site Santa Monica)

FAV; Santa Monica (CA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Unlimited PTO

401(k) plan

Comprehensive health insurance

Paid holidays

Competitive salary

Job summary

favorited is seeking an IT, Security & Compliance Manager to own the systems, processes, and programs that keep our Santa Monica-based platform secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, compliance, risk management, and vendor management, collaborating with executives, engineering, and external partners to implement security controls and certification roadmaps.

Qualifications

• 5+ years of experience across IT, information security, GRC, compliance, or a related field.
• Experience owning or significantly contributing to IT and security programs within a startup or high-growth technology company.
• Strong understanding of security frameworks, controls, risk management, and compliance requirements.
• Experience building security and compliance programs from the ground up.
• Familiarity with SOC 2, ISO 27001, GDPR, CCPA/CPRA, and other relevant frameworks.
• Experience managing security audits and certification processes.
• Strong experience with identity and access management, SaaS administration, endpoint security, and IT operations.
• Experience evaluating and managing IT and security vendors.
• Ability to assess the company’s needs and determine which security certifications and compliance standards are appropriate.
• Strong organizational and project management skills with the ability to manage multiple priorities.
• Excellent communication skills and the ability to work effectively with both technical and non-technical teams.
• Comfortable operating independently and building processes where they don’t yet exist.
• High level of discretion, judgment, and ownership when dealing with sensitive company and user information.

Responsibilities

• Own day-to-day IT operations, including systems, applications, access management, devices, identity, and employee technology.
• Develop and maintain favorited’s information security program, policies, standards, and controls.
• Own security and compliance readiness, including identifying appropriate certifications and frameworks for the business.
• Develop and manage a roadmap for certifications such as SOC 2, ISO 27001, or other relevant standards based on business and customer requirements.
• Partner with engineering and infrastructure teams to ensure appropriate security controls, monitoring, access management, and infrastructure practices are in place.
• Manage employee identity and access management, including onboarding, offboarding, permissions, and periodic access reviews.
• Establish and maintain security policies covering areas such as access control, acceptable use, data protection, incident response, and vendor risk.
• Own or coordinate security audits, assessments, penetration tests, and compliance reviews.
• Develop and maintain an effective incident response and security escalation process.
• Manage technology and security vendors, including vendor selection, evaluation, contracts, renewals, and ongoing performance.
• Establish a third‑party risk management process for vendors that have access to company systems or data.
• Partner with legal, finance, HR, and leadership on privacy, compliance, and risk‑related initiatives.
• Maintain accurate documentation and evidence required for security and compliance programs.
• Conduct regular risk assessments and proactively identify opportunities to strengthen the company’s security posture.
• Educate employees on security best practices, policies, and compliance requirements.
• Help establish scalable IT and security processes that can support favorited as the company grows.

Skills

IT operations

Information security

GRC & Compliance

Startup experience

Security frameworks

Vendor management

Tools

AWS

GCP

SIEM

IAM

Job description

favorited is seeking an IT, Security & Compliance Manager to own the systems, processes, and programs that keep our Santa Monica-based platform secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, compliance, risk management, and vendor management, collaborating with executives, engineering, and external partners to implement security controls and certification roadmaps.