Governance Risk & Compliance Lead, Whatnot
$180-230k
+ Equity
Live stream platform & marketplace for collectibles
Posted today
Live stream platform & marketplace for collectibles
501-1000 employees
Posted today
$180-230k
+ Equity
501-1000 employees
Company mission
Whatnot missions is to enable anyone to turn their passion into a business and bring people together through commerce.
Role
Who you are
- Team members in this role are required to be within commuting distance of our Los Angeles, CA, San Francisco, CA, or New York, NY hubs
- As our Governance, Risk, & Compliance Lead you should have a minimum of 8+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
- A Bachelor’s degree in Computer Science, Information Security, or a related field
- The successful candidate will have a deep knowledge of security best practices and industry standards, such as ISO 27001, SOC2, PCI, and GDPR/ CCPA
- Experience at a Big 4 firm or similar reputable audit firm
- Experience in supporting complex third party audit projects in a cloud centric environment, with a strong aptitude to understand emerging technologies to ensure regulatory and compliance requirements are met
- Excellent written communication skills with the ability to document, communicate, and report security assessments as well as the status of the implementation and effectiveness of cybersecurity controls with product and business leaders
What the job involves
- Whatnot's Security GRC team is dedicated to building trust with regulators, customers, employees, and investors by demonstrating commitment to industry standards and continuous improvement. We defend and protect our users' data and information as if it were our own. As part of the Security GRC team, you can expect to be responsible for:
- Reviewing and implementing secure configurations across various tools like Okta, Terraform, AWS, Lumos, Cloudflare, and Github
- Developing security requirements for partner teams and driving progress towards the execution of those requirements
- Preparing for and running our external security audits
- Shaping the strategic direction of the Security GRC team
Our take
The collectible toy market is large, and Whatnot has built a unique social platform that enables sellers to use livestreams to showcase their products and reach more buyers. The company’s focus is on collectible toys, some of which are rare and can cost thousands of dollars, and has also expanded to sports cards.
The idea of Whatnot was led by buyer trends. Instagram's live feature became a popular place for selling toys and trading cards, but of course was not set up to facilitate bidding or handling payments after a sale occurs. Whatnot combines live showcasing with follow-up sale capabilities, thus serving the community in a more novel way than established collectibles market players such as eBay.
The company has grown fast. It was established in 2019 and has already expanded from its original category - Funko Pop figurines - to Pokemon cards, pins, sports cards, and many more. There is still plenty of scope for expanding into new categories, as the company aims to establish itself as the go-to for this large niche, which will be facilitated by the strong levels of funding that Whatnot has raised.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
54% employee growth in 12 months
Company
Employee endorsements
Hard working team
"Everyone here puts in the work. It's refreshing to work on a team where everyone is carrying their weight and lifting each other up. The work ethic..."
Funding (last 2 of 7 rounds)
Jan 2025
$265m
SERIES E
Jul 2022
$260m
SERIES D
Total funding: $749.2m
Company benefits
- Wellness: Health, dental, vision, and life insurance plans. We also cover some of the cost for your dependents as well.
- Compensation: Full-time Whatnauts receive equity, a WFH stipend to support your remote workspace and a monthly stipend to dogfood the app.
- Recharge: Flexible Time Off policy, holiday week off at the end of year, and paid parental leave after 1 year with us.
- Flexibility: Remote-first work culture. We provide a working environment where you're in charge of your time and schedule.
Company values
- Always listen to customers
- Move uncomfortably fast
- Prioritize impact ruthlessly
- Own everything and nothing
- Set crazy goals
- Provide extreme transparency
- Optimize for the upside
- Team over ego
- Figure it out
- Deeply understand why
- Have fun & be nice
Company HQ
Marina del Rey, CA
Articles
Leadership
Grant LaFontaine
(Co-Founder & CEO)Former Product Marketing Manager at Google, Project Manager at Facebook. Also co-founded Kit.
Logan Head
(Co-Founder)Experience in Engineering, including at Maker's Row, Factr, and Flight Club. Former Senior Product Manager at GOAT.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 69 more jobs at Whatnot