Polymarket is the world’s largest prediction market, allowing you to stay informed and profit from your knowledge by trading on future events across various topics. Backed by General Catalyst and Founders Fund.
About the role
Polymarket's IT and Security team is small, senior, and expected to move fast. This role sits at the intersection of third-party risk, audit execution, and privacy operations — and the person in it will own all three. DSARs need to be processed, vendors need risk dispositions before they get access to our systems, and PIAs need to happen before engineering ships, not after.
What they're looking for
- Hands-on SOC 2 Type II audit experience — you have personally gathered evidence, coordinated with control owners, and managed auditor requests through a full engagement cycle
- Demonstrated experience conducting third-party vendor risk assessments, including reading and interpreting SOC 2 reports, PCI AOCs, and pen test summaries, and writing risk memos with clear dispositions
- Working knowledge of GDPR, CCPA/CPRA, BIPA, and CUBI, and the ability to translate those obligations into concrete process steps that product and engineering teams can follow
- Experience building compliance or privacy processes from scratch, not just inheriting and maintaining them
- Comfort operating independently, triaging ambiguous situations, and making defensible decisions without waiting for escalation on routine assessments
- (Plus) Experience with PCI DSS scoping or self-assessment activities
More about this role
Polymarket is the world's largest prediction market platform. We enable individuals to express views on real-world events by trading on outcomes across politics, economics, sports, culture, and current affairs. Built as a peer-to-peer marketplace with no centralized "house," Polymarket aggregates diverse opinions into transparent, market-based probabilities that reflect collective expectations about the future.
We're growing fast — both in terms of volume ($21B traded in 2025) and adoption as an alternative news source. Our ambition is to become a ubiquitous beacon of truth in global media and we need your help adding fuel to the fire.
Polymarket's IT and Security team is small, senior, and expected to move fast. This role sits at the intersection of third-party risk, audit execution, and privacy operations — and the person in it will own all three. DSARs need to be processed, vendors need risk dispositions before they get access to our systems, and PIAs need to happen before engineering ships, not after.
This is a senior IC role. You'll make judgment calls independently, build processes that didn't exist before you arrived, and leave behind documentation the team can actually...
Browse similar: Startup jobs