Security GRC Lead: Scale Compliance & Risk

Whatnot; New York (NY); On-site; USD 175,000 - 230,000; Full time

Benefits offered by this job

Health insurance options

Work from home support

Parental leave

401k with employer match

Life-time wellness benefits

Job summary

Whatnot's Security GRC team is dedicated to building trust with regulators, customers, employees, and investors by demonstrating commitment to industry standards and continuous improvement. We defend and protect our users' data and information as if it were our own.

As part of the Security GRC team, you can expect to be responsible for: Reviewing and implementing secure configurations across Okta, Terraform, AWS, Lumos, Cloudflare, and Github, developing security requirements for partner teams,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Deep knowledge of security best practices and industry standards (ISO 27001, SOC2, PCI, GDPR/CCPA).
• Experience at a Big 4 firm or similar audit firm.
• Experience in complex third-party audit projects in a cloud-centric environment.
• Excellent written communication to document and report security assessments.
• Experience balancing security risks with business priorities.

Responsibilities

• Reviewing and implementing secure configurations across tools like Okta, Terraform, AWS, Lumos, Cloudflare, and Github.
• Developing security requirements for partner teams and driving progress toward execution.
• Preparing for and running external security audits.
• Shaping the strategic direction of the Security GRC team.
• Leading the security risk management program to prioritize risks and ensure mitigations.

Skills

Security governance

Risk management

Compliance program

Security audits

Education

Bachelor’s in Computer Science or Information Security

Tools

Okta

Terraform

AWS

Lumos

Cloudflare

Github

Job description

Whatnot's Security GRC team is dedicated to building trust with regulators, customers, employees, and investors by demonstrating commitment to industry standards and continuous improvement. We defend and protect our users' data and information as if it were our own.

As part of the Security GRC team, you can expect to be responsible for: Reviewing and implementing secure configurations across Okta, Terraform, AWS, Lumos, Cloudflare, and Github, developing security requirements for partner teams,