CybersecurityJobs.io
← Back to all jobs

This position is no longer accepting applications

Closed on September 29, 2026.

This role is filled — get an email when new Information Security roles open on CybersecurityJobs.io:

Whatnot

Security Engineer (GRC)

Whatnot
New York, NY $175k - $230k/yr Full time Posted 1mo ago
Manager Cloud Platforms Data Security Engineer Facilities Management GRC Identity and Access Management Information Security InfoSec Management Project Management Risk Governance Risk Management Security Security Compliance Security Operations Security Standards ServiceNow
View similar jobs

Get alerted when similar jobs are posted — set up a New Information Security jobs on CybersecurityJobs.io alert.

See other roles at Whatnot.

Job Description

This hybrid Security GRC role at Whatnot focuses on secure configuration reviews, audit readiness, and a risk management program aligned to industry standards.

Responsibilities

  • Review and implement secure configurations across tools including Okta, Terraform, AWS, Lumos, Cloudflare, and GitHub
  • Develop security requirements for partner teams and drive progress toward execution of those requirements
  • Prepare for and run external security audits
  • Help shape the strategic direction of the Security GRC team
  • Lead the security risk management program to prioritize security risks and ensure appropriate mitigations are implemented

Requirements

  • 5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
  • Bachelor’s degree in Computer Science, Information Security, or a related field
  • Deep knowledge of security best practices and industry standards, including ISO 27001, SOC 2, PCI, and GDPR/CCPA
  • Experience at a Big 4 firm or a similar reputable audit firm
  • Experience supporting complex third-party audit projects in a cloud-centric environment, with an ability to understand emerging technologies to meet regulatory and compliance needs
  • Excellent written communication skills to document, communicate, and report security assessments and the status and effectiveness of cybersecurity controls with product and business leaders
  • Experience creating and running a security risk management program that balances security risks with business priorities

Technologies

  • Okta, Terraform, AWS, Lumos, Cloudflare, GitHub
  • ISO 27001, SOC 2, PCI, GDPR, CCPA

Benefits

  • Generous Holiday and Time off Policy
  • Health insurance options: Medical, Dental, Vision
  • Work From Home Support
  • Home office setup allowance
  • Monthly allowance for cell phone and internet
  • Care benefits
  • Monthly allowance for wellness
  • Annual allowance towards Childcare
  • Lifetime benefit for family planning, such as adoption or fertility expenses
  • Retirement: 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
  • Monthly allowance to dogfood the app
  • Parental Leave
  • 16 weeks of paid parental leave plus one month gradual return to work

Role Details

  • Location: New York, NY (hybrid)
  • Salary: USD 175,000 - 230,000 per year
  • Commuting requirement: must be within commuting distance of one of the hubs: Los Angeles, CA, San Francisco, CA, Seattle, WA, or New York, NY

Similar Jobs