GRC and Privacy Lead
Polymarket is a decentralized information markets platform that lets users bet on the outcome of real-world events.
Maintainer signals as of 9/2/2026
Funding history
About Polymarket
Polymarket is an information markets platform where users can trade on the outcomes of various events, leveraging the power of free markets to forecast the future. It provides a mechanism for users to bet on real-world events and earn money based on the outcomes.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will assess vendor risk, analyze assurance documentation, and prepare risk memos. You will manage SOC 2 audit evidence, process DSARs, conduct privacy impact assessments, maintain policies and remediation tracking, and implement privacy compliance processes, data inventories, and data-flow maps.
Requirements
- SOC 2 Type II
- Third-party risk assessment
- SOC 2 report
- PCI AOC
- Penetration testing
- GDPR
- CCPA
- CPRA
- BIPA
- CUBI
- Privacy compliance
- Privacy impact assessment
- Vendor risk
- PCI DSS
- KYC
- Identity verification
Responsibilities
- Triage vendor intake requests and assess inherent risk
- Analyze vendor assurance documentation and write risk memos
- Manage SOC 2 Type II audit evidence and auditor submissions
- Process DSAR requests and track statutory deadlines
- Run privacy impact assessments for product features and vendors
- Maintain policies and track remediation for vendor and audit findings
- Implement privacy compliance processes, data inventories, and data-flow maps
Benefits
- Equity
- Unlimited PTO
- Health coverage
- Vision coverage
- Dental coverage
- 401k match
- MacBook Pro, display, and accessories