Senior IT Compliance & Privacy Specialist

Location: New York (On-site)

Salary: $150,000–$200,000 annually

Company

Polymarket is the world's largest peer-to-peer prediction market platform, enabling users to trade on real-world event outcomes.

What you will do

• Triage vendor intake requests and assess inherent risks based on data sensitivity and system connectivity.
• Analyze vendor assurance documentation, including SOC 2 reports and ISO certifications, to produce clear risk memos.
• Gather and organize evidence for SOC 2 Type II engagements and manage auditor portal submissions.
• Process DSAR requests across multiple entities while applying correct retention and routing logic.
• Run privacy impact assessments for new product features in collaboration with engineering teams.
• Maintain the policy library and track remediation for vendor and audit findings.

Requirements

• Must be based in New York and able to work on-site.
• Hands-on experience managing SOC 2 Type II audit cycles and evidence gathering.
• Proven ability to conduct third-party vendor risk assessments and write defensible risk dispositions.
• Working knowledge of GDPR, CCPA/CPRA, BIPA, and CUBI regulations.
• Experience building compliance or privacy processes from scratch.
• Ability to operate independently and make judgment calls in ambiguous situations.

Nice to have

• Experience with PCI DSS scoping or self-assessment activities.
• Familiarity with KYC and identity verification data flows, including biometric data.
• Prior experience in crypto, fintech, or prediction market environments.

Culture & Benefits

• Competitive salary and equity package.
• Unlimited PTO policy.
• Full health, vision, and dental coverage.
• 401k matching program.
• Hardware setup including a new MacBook Pro and accessories.