Security Engineer (GRC)
Job Description
This hybrid Security GRC role at Whatnot focuses on secure configuration reviews, audit readiness, and a risk management program aligned to industry standards.
Responsibilities
- Review and implement secure configurations across tools including Okta, Terraform, AWS, Lumos, Cloudflare, and GitHub
- Develop security requirements for partner teams and drive progress toward execution of those requirements
- Prepare for and run external security audits
- Help shape the strategic direction of the Security GRC team
- Lead the security risk management program to prioritize security risks and ensure appropriate mitigations are implemented
Requirements
- 5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
- Bachelor’s degree in Computer Science, Information Security, or a related field
- Deep knowledge of security best practices and industry standards, including ISO 27001, SOC 2, PCI, and GDPR/CCPA
- Experience at a Big 4 firm or a similar reputable audit firm
- Experience supporting complex third-party audit projects in a cloud-centric environment, with an ability to understand emerging technologies to meet regulatory and compliance needs
- Excellent written communication skills to document, communicate, and report security assessments and the status and effectiveness of cybersecurity controls with product and business leaders
- Experience creating and running a security risk management program that balances security risks with business priorities
Technologies
- Okta, Terraform, AWS, Lumos, Cloudflare, GitHub
- ISO 27001, SOC 2, PCI, GDPR, CCPA
Benefits
- Generous Holiday and Time off Policy
- Health insurance options: Medical, Dental, Vision
- Work From Home Support
- Home office setup allowance
- Monthly allowance for cell phone and internet
- Care benefits
- Monthly allowance for wellness
- Annual allowance towards Childcare
- Lifetime benefit for family planning, such as adoption or fertility expenses
- Retirement: 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
- Monthly allowance to dogfood the app
- Parental Leave
- 16 weeks of paid parental leave plus one month gradual return to work
Role Details
- Location: New York, NY (hybrid)
- Salary: USD 175,000 - 230,000 per year
- Commuting requirement: must be within commuting distance of one of the hubs: Los Angeles, CA, San Francisco, CA, Seattle, WA, or New York, NY