2 days ago
San Mateo, CA, USAStaff+
Responsibilities
- Own security architecture and the technical compliance posture across Step, Feastables, and the media organization.
- Set security standards for cloud infrastructure, applications, and data systems.
- Lead threat modeling and security reviews for high-risk products, including payment, account, and minors’ data systems.
- Run vulnerability management and drive remediation to closure.
- Build and own incident-response capabilities, including detection, playbooks, escalation, post-incident reviews, and breach-notification readiness.
- Design a unified control framework mapped to PCI DSS, COPPA, GDPR/CCPA, and SOC 2.
- Automate compliance evidence collection and control monitoring.
- Act as technical lead during PCI DSS and SOC 2 audits and represent the company with auditors, regulators, and partners.
- Translate regulatory requirements into actionable engineering work and advise leaders on risk tradeoffs.
- Define secure-by-default patterns and paved paths for engineering teams.
Requirements
- Around 15 years of combined security engineering and compliance experience.
- Proven production ownership of PCI DSS and SOC 2 from control design through successful audit completion.
- Strong cloud security experience with AWS and GCP.
- Application security, threat modeling, and incident-response experience.
- Ability to read and reason about code and work hands-on in security engineering and compliance.
- Working knowledge of COPPA, GDPR, and CCPA and how they map to technical controls.
- Experience with security automation and infrastructure-as-code such as Terraform is preferred.
- Fintech or payments experience, including money movement or KYC, is preferred.
- Relevant certifications such as CISSP, CCSP, or OSCP are preferred.
- Experience standing up a security or compliance function at an early-stage organization is preferred.
- Ability to use AI in security automation and evidence pipelines.
Benefits
- Highly competitive equity package.
- Competitive salary.
- Medical, dental, vision, and company-paid life insurance.
- Company contributions to Health Savings Accounts.
- 401(k) plan with Safe Harbor company matching.
- Flexible vacation policy and paid company holidays.
- Company-provided technology package.
- Relocation assistance where applicable, including travel and company-provided housing for the first 90 days.
- Hybrid work model with approximately three days per week in the San Mateo, California office.
Tech Stack
Categories
About MrBeast
MrBeast (Beast Industries) is a media and entertainment company built around creator Jimmy Donaldson, producing large-scale YouTube videos and related digital content. The business spans advertising and sponsorships, and consumer products such as Feastables, supported by in-house studios with petabyte-scale production infrastructure. Founded in 2012 and headquartered in Greenville, North Carolina, it is privately held and known for philanthropic projects that reach a global audience.