IT, Security, and Compliance Manager

Job Title: IT, Security & Compliance Manager
Location: Santa Monica, CA (On-site)
Employment Type: Full-time
Level: Mid–Senior
Company: favorited

At favorited, we believe that digital communities should be more than just spaces to watch content. Our platform is a place to connect, engage, and play, and empowers creators by enhancing audience participation and fostering deeper connections.

Our work culture is intense and isn’t for everyone. But, if you’re a self-starter eager to shape the future of social interaction with a team that holds itself to the highest standards, this is the place for you. We value open, yet respectful communication and real-time feedback to help each other grow quickly. If you’re passionate about gaming and have a knack for gamifying everyday life, you’ll thrive in our fast-moving, collaborative environment.

We’re looking for an IT, Security & Compliance Manager to own and build the systems, processes, and programs that keep favorited secure, compliant, and operationally efficient.

This is a highly hands-on role spanning IT operations, information security, compliance, risk management, and vendor management
. You’ll work closely with executive leadership, engineering, operations, and external partners to establish the right technology controls and security practices as the company scales.

You’ll also play a key role in determining which security and compliance certifications favorited should pursue
, building the roadmap to achieve them, and ensuring the company maintains the appropriate standards as our customer, creator, and business requirements evolve.

• Own day-to-day IT operations
  , including systems, applications, access management, devices, identity, and employee technology.

• Develop and maintain favorited’s information security program
  , policies, standards, and controls.

• Own security and compliance readiness
  , including identifying appropriate certifications and frameworks for the business.

• Develop and manage a roadmap for certifications such as SOC 2, ISO 27001
  , or other relevant standards based on business and customer requirements.

• Partner with engineering and infrastructure teams to ensure appropriate security controls, monitoring, access management, and infrastructure practices are in place.

• Manage employee identity and access management
  , including onboarding, offboarding, permissions, and periodic access reviews.

• Establish and maintain security policies covering areas such as access control, acceptable use, data protection, incident response, and vendor risk.

• Own or coordinate security audits, assessments, penetration tests, and compliance reviews
  .

• Develop and maintain an effective incident response and security escalation process
  .

• Manage technology and security vendors, including vendor selection, evaluation, contracts, renewals, and ongoing performance.

• Establish a third-party risk management process for vendors that have access to company systems or data.

• Partner with legal, finance, HR, and leadership on privacy, compliance, and risk-related initiatives
  .

• Maintain accurate documentation and evidence required for security and compliance programs.

• Conduct regular risk assessments and proactively identify opportunities to strengthen the company’s security posture.

• Educate employees on security best practices, policies, and compliance requirements
  .

• Help establish scalable IT and security processes that can support favorited as the company grows.

• 5+ years of experience across IT, information security, GRC, compliance, or a related field
  .

• Experience owning or significantly contributing to IT and security programs within a startup or high-growth technology company
  .

• Strong understanding of security frameworks,…