IT Security & Compliance Manager - SOC 2/ISO 27001, On-site

Favorited; Santa Monica (CA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Unlimited PTO

401(k) plan

Health insurance

Job summary

favorited is seeking an IT, Security & Compliance Manager in Santa Monica, on-site, to own and build the systems, processes, and programs that keep the company secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, compliance, risk management, and vendor management, collaborating with leadership and engineering to implement strong security controls and certifications as the business scales.

Qualifications

• 5+ years of experience across IT, information security, GRC, compliance, or a related field.
• Experience owning or significantly contributing to IT and security programs within a startup or high-growth technology company.
• Strong understanding of security frameworks, controls, risk management, and compliance requirements.
• Experience building security and compliance programs from the ground up.
• Familiarity with SOC 2, ISO 27001, GDPR, CCPA/CPRA, and other relevant security and privacy frameworks.
• Experience managing security audits and certification processes.
• Strong experience with identity and access management, SaaS administration, endpoint security, and IT operations.
• Experience evaluating and managing IT and security vendors.
• Ability to assess the company’s needs and determine which security certifications and compliance standards are appropriate.
• Strong organizational and project management skills with the ability to manage multiple priorities.
• Excellent communication skills and the ability to work effectively with both technical and non-technical teams.
• Comfortable operating independently and building processes where they don’t yet exist.
• High level of discretion, judgment, and ownership when dealing with sensitive company and user information.

Responsibilities

• Own day-to-day IT operations, including systems, applications, access management, devices, identity, and employee technology.
• Develop and maintain favorited’s information security program, policies, standards, and controls.
• Own security and compliance readiness, including identifying appropriate certifications and frameworks for the business.
• Develop and manage a roadmap for certifications such as SOC 2, ISO 27001, or other relevant standards.
• Partner with engineering and infrastructure teams to ensure appropriate security controls, monitoring, access management, and infrastructure practices are in place.
• Manage employee identity and access management, including onboarding, offboarding, permissions, and periodic access reviews.
• Establish and maintain security policies covering access control, data protection, incident response, and vendor risk.
• Own or coordinate security audits, assessments, penetration tests, and compliance reviews.

Skills

IT operations

information security

GRC

compliance

risk management

vendor management

Job description

favorited is seeking an IT, Security & Compliance Manager in Santa Monica, on-site, to own and build the systems, processes, and programs that keep the company secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, compliance, risk management, and vendor management, collaborating with leadership and engineering to implement strong security controls and certifications as the business scales.