This position is no longer accepting applications
Closed on September 29, 2026.
This role is filled — get an email when new Cloud Platforms roles open on EngineerJobs.io:
Security Engineer (GRC)
Manager
Cloud Platforms
Data Security
Facilities Management
GRC
Identity and Access Management
Information Security
InfoSec
Management
Project Management
Risk Governance
Risk Management
Security
Security Compliance
Security Operations
Security Standards
ServiceNow
View similar jobs
Get alerted when similar jobs are posted — set up a New Cloud Platforms jobs on EngineerJobs.io alert.
See other roles at Whatnot.
Job Description
Whatnot is hiring a Security Engineer (GRC) for a hybrid role in New York, NY focused on governance, risk, and compliance.
Responsibilities
- Review and implement secure configurations across tools including Okta, Terraform, AWS, Lumos, Cloudflare, and Github
- Build security requirements for partner teams and drive adoption and execution progress
- Prepare for and participate in external security audits
- Help shape the strategic direction of the Security GRC team
- Lead a security risk management program that prioritizes risks and supports implementation of appropriate mitigations
Requirements
- 5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
- Bachelor’s degree in Computer Science, Information Security, or a related field
- Deep knowledge of security best practices and industry standards, including ISO 27001, SOC2, PCI, and GDPR/CCPA
- Experience at a Big 4 firm or similar reputable audit firm
- Experience supporting complex third party audit projects in a cloud centric environment, with strong ability to understand emerging technologies to meet regulatory and compliance requirements
- Excellent written communication skills for documenting, communicating, and reporting security assessments plus the status and effectiveness of cybersecurity controls to product and business leaders
- Experience creating and running a security risk management program that balances security risks with business priorities
Technologies
- Okta
- Terraform
- AWS
- Lumos
- Cloudflare
- Github
- ISO 27001
- SOC2
- PCI
- GDPR
- CCPA
Benefits
- Generous Holiday and Time off Policy
- Health Insurance options including Medical, Dental, Vision
- Work From Home Support
- Home office setup allowance
- Monthly allowance for cell phone and internet
- Care benefits
- Monthly allowance for wellness
- Annual allowance towards Childcare
- Lifetime benefit for family planning, such as adoption or fertility expenses
- Retirement: 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
- Monthly allowance to dogfood the app
- Parental Leave
- 16 weeks of paid parental leave plus one month gradual return to work
Role Notes
- Expected commuting distance to specified US hubs
- Team purpose: building trust with regulators, customers, employees, and investors through commitment to industry standards and continuous improvement
- Security focus: defending and protecting users’ data and information
- Hub locations: Los Angeles, CA, San Francisco, CA, Seattle, WA, or New York, NY
Compensation: USD 175,000 - 230,000 per year
Similar Jobs
S
S
S
