# IT, Security, and Compliance Manager at Favorited > Onsite · United States · Manager · Security · open. Source: https://alderhq.app/jobs/ashby%3Afavorited%3Ad80c3b1e-b4e5-4f0d-9f05-c082ee540fbc (read 2026-11-09). ## Facts (observed) - Company: [Favorited](https://alderhq.app/companies/favorited) - Location text: Santa Monica, CA - Where it can be done from (inferred): Onsite · United States (evidence: "Location: Santa Monica, CA") - Posted: 2026-10-01 (39 days ago) - First seen by alder: 2026-11-04 · last verified: 2026-11-08 - Reposted: 0 times · edited: 1 times - Apply on the employer's site: https://jobs.ashbyhq.com/fav/d80c3b1e-b4e5-4f0d-9f05-c082ee540fbc ## Pay and sponsorship - Posted pay: $140k–$170k per year (from the listing's pay field) - Market band for similar posted roles (Los Angeles, n 4): p25 $164k, median $178k, p75 $196k ## Description (the employer's text) Job Title: IT, Security & Compliance Manager Location: Santa Monica, CA (On-site) Employment Type: Full-time Level: Mid–Senior Company: fav ### About fav At fav, we believe that digital communities should be more than just spaces to watch content. Our platform is a place to connect, engage, and play, and empowers creators by enhancing audience participation and fostering deeper connections. Our work culture is intense and isn’t for everyone. But, if you’re a self-starter eager to shape the future of social interaction with a team that holds itself to the highest standards, this is the place for you. We value open, yet respectful communication and real-time feedback to help each other grow quickly. If you’re passionate about gaming and have a knack for gamifying everyday life, you’ll thrive in our fast-moving, collaborative environment. ### About the Role We’re looking for an IT, Security & Compliance Manager to own and build the systems, processes, and programs that keep favsecure, compliant, and operationally efficient. This is a highly hands-on role spanning IT operations, information security, compliance, risk management, and vendor management. You’ll work closely with executive leadership, engineering, operations, and external partners to establish the right technology controls and security practices as the company scales. You’ll also play a key role in determining which security and compliance certifications fav should pursue, building the roadmap to achieve them, and ensuring the company maintains the appropriate standards as our customer, creator, and business requirements evolve. ### Responsibilities Own day-to-day IT operations, including systems, applications, access management, devices, identity, and employee technology. Develop and maintain fav's information security program, policies, standards, and controls. Own security and compliance readiness, including identifying appropriate certifications and frameworks for the business. Develop and manage a roadmap for certifications such as SOC 2, ISO 27001, or other relevant standards based on business and customer requirements. Partner with engineering and infrastructure teams to ensure appropriate security controls, monitoring, access management, and infrastructure practices are in place. Manage employee identity and access management, including onboarding, offboarding, permissions, and periodic access reviews. Establish and maintain security policies covering areas such as access control, acceptable use, data protection, incident response, and vendor risk. Own or coordinate security audits, assessments, penetration tests, and compliance reviews. Develop and maintain an effective incident response and security escalation process. Manage technology and security vendors, including vendor selection, evaluation, contracts, renewals, and ongoing performance. Establish a third-party risk management process for vendors that have access to company systems or data. Partner with legal, finance, HR, and leadership on privacy, compliance, and risk-related initiatives. Maintain accurate documentation and evidence required for security and compliance programs. Conduct regular risk assessments and proactively identify opportunities to strengthen the company’s security posture. Educate employees on security best practices, policies, and compliance requirements. Help establish scalable IT and security processes that can support fav as the company grows. ### What We’re Looking For 5+ years of experience across IT, information security, GRC, compliance, or a related field. Experience owning or significantly contributing to IT and security programs within a startup or high-growth technology company. Strong understanding of security frameworks, controls, risk management, and compliance requirements. Experience building security and compliance programs from the ground up. Familiarity with SOC 2, ISO 27001, GDPR, CCPA/CPRA, and other relevant security and privacy frameworks. Experience managing security audits and certification processes. Strong experience with identity and access management, SaaS administration, endpoint security, and IT operations. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/ashby%3Afavorited%3Ad80c3b1e-b4e5-4f0d-9f05-c082ee540fbc and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.