← All roles

Security Engineer (GRC)

Whatnot· Engineering
Apply on company site
Hybrid (US)$175k - $230k + equityFull-timePosted 4w ago

About the role

Security GRC role focused on governance, risk, and compliance to build trust with regulators, customers, employees, and investors; responsible for secure configurations, security requirements for partner teams, audits, and risk management.

Responsibilities

  • Reviewing and implementing secure configurations across various tools like Okta, Terraform, AWS, Lumos, Cloudflare, and Github.
  • Developing security requirements for partner teams and driving progress towards the execution of those requirements.
  • Preparing for and running external security audits.
  • Shaping the strategic direction of the Security GRC team.
  • Leading our security risk management program to prioritize security risks and ensure proper mitigations are implemented.

Qualifications

  • A Bachelor’s degree in Computer Science, Information Security, or a related field.
  • Deep knowledge of security best practices and standards such as ISO 27001, SOC2, PCI, and GDPR/CCPA.
  • Experience at a Big 4 firm or similar reputable audit firm.
  • Experience in supporting complex third party audit projects in a cloud-centric environment.

Skills

Required:Security governance and complianceISO 27001, SOC2, PCI, GDPR/CCPAAudit coordinationSecurity controls documentation

Benefits

  • Generous Holiday and Time off Policy
  • Health Insurance options including Medical, Dental, Vision
  • Work From Home Support
  • Care benefits
  • Retirement; 401k offering for Traditional and Roth accounts in the US (employer match up to 4%), Pension plans internationally
  • Monthly allowance to dogfood the app
  • Parental Leave
Last updated Oct 21, 2026. Interested? Apply on the company site.
Whatnot logo

About Whatnot

Whatnot is the largest livestream shopping platform in the U.S.

Whatnot is the largest livestream shopping platform in the U.S., connecting buyers and sellers in real-time across any category – from collectibles like trading cards to comics, fashion, sneakers, and more.

marketplacee-commerce
Company profileWebsite

More open roles at Whatnot