EngineerJobs.io
← Back to all jobs
Whatnot

Security Engineer (GRC)

Whatnot
New York, NY $175k - $230k/yr Full time Posted 21d ago
Manager Cloud Platforms Data Security Facilities Management GRC Identity and Access Management Information Security InfoSec Management Project Management Risk Governance Risk Management Security Security Compliance Security Operations Security Standards ServiceNow
Apply Now

Job Description

Whatnot is hiring a Security Engineer (GRC) for a hybrid role in New York, NY focused on governance, risk, and compliance.

Responsibilities

  • Review and implement secure configurations across tools including Okta, Terraform, AWS, Lumos, Cloudflare, and Github
  • Build security requirements for partner teams and drive adoption and execution progress
  • Prepare for and participate in external security audits
  • Help shape the strategic direction of the Security GRC team
  • Lead a security risk management program that prioritizes risks and supports implementation of appropriate mitigations

Requirements

  • 5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
  • Bachelor’s degree in Computer Science, Information Security, or a related field
  • Deep knowledge of security best practices and industry standards, including ISO 27001, SOC2, PCI, and GDPR/CCPA
  • Experience at a Big 4 firm or similar reputable audit firm
  • Experience supporting complex third party audit projects in a cloud centric environment, with strong ability to understand emerging technologies to meet regulatory and compliance requirements
  • Excellent written communication skills for documenting, communicating, and reporting security assessments plus the status and effectiveness of cybersecurity controls to product and business leaders
  • Experience creating and running a security risk management program that balances security risks with business priorities

Technologies

  • Okta
  • Terraform
  • AWS
  • Lumos
  • Cloudflare
  • Github
  • ISO 27001
  • SOC2
  • PCI
  • GDPR
  • CCPA

Benefits

  • Generous Holiday and Time off Policy
  • Health Insurance options including Medical, Dental, Vision
  • Work From Home Support
  • Home office setup allowance
  • Monthly allowance for cell phone and internet
  • Care benefits
  • Monthly allowance for wellness
  • Annual allowance towards Childcare
  • Lifetime benefit for family planning, such as adoption or fertility expenses
  • Retirement: 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
  • Monthly allowance to dogfood the app
  • Parental Leave
  • 16 weeks of paid parental leave plus one month gradual return to work

Role Notes

  • Expected commuting distance to specified US hubs
  • Team purpose: building trust with regulators, customers, employees, and investors through commitment to industry standards and continuous improvement
  • Security focus: defending and protecting users’ data and information
  • Hub locations: Los Angeles, CA, San Francisco, CA, Seattle, WA, or New York, NY

Compensation: USD 175,000 - 230,000 per year

Similar Jobs