Prinicipal GRC Lead

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. We grade, authenticate, vault, and sell millions of record-setting collectibles, all while modernizing and digitalizing the process to further our mission of helping collectors pursue their passions. We’re always on the lookout for talented people to join our growing team.

Our services span collectible coins, trading cards, Funko Pops!, video games, event tickets, autographs, and memorabilia. Our subsidiaries include PSA, PCGS, SGC, WATA, and Card Ladder.

Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 1,900 people across our headquarters in Santa Ana and offices in Jersey City, Tokyo, Shanghai, Hong Kong, Toronto, Guadalajara, Dallas, and Paris.

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. We grade, authenticate, vault and sell millions of record-setting collectibles, all while modernizing and digitalizing the process to further our mission of helping collectors pursue their passions. We’re always on the lookout for talented people to join our growing team.

Our services span collectible coins, trading cards, Funko Pops!, video games, event tickets, autographs, and memorabilia. Our subsidiaries include PSA, PCGS, WATA, Card Ladder, SGC and the Long Beach Expo collectibles trade show. Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 1,700 people across our headquarters in Santa Ana and offices in Jersey City, Seattle, Hong Kong, Paris, Shanghai, and Tokyo.

We’re transforming the collecting experience with technology that brings authentication, grading, and trading into the modern era. Our products are equalizing the playing field by providing tools that make complex research analytics — including pricing, scarcity reports, and historic sales data — accessible to every collector, old or new. Our engineering mission is to democratize technology while promoting innovation, collaboration, and continuous learning throughout the organization. We're seeking engineers to utilize advanced technology in agile settings, with a focus on improving the customer experience for every collector.

Collectors Cybersecurity team is committed to utilize cybersecurity, risk and privacy best practices on our platforms, leveraging signal intelligence and observability at scale to protect our customers, employees and our brand.

We’re looking for a GRC Lead to join our Cybersecurity team to lead our Governance, Risk and Compliance program and partner with the organization to manage security risk, ensuring the security and integrity of our applications.

You’ll report to the VP of Cybersecurity and work from our Santa Ana, CA office. Remote or hybrid candidates will also be considered. We believe that there is significant value in in-person collaboration. If you live within a 1 hour commuting distance to one of our offices, you will be required to be onsite most of the time. This will be discussed further as part of the recruiting process.

What You’ll Do:

• Drive the GRC Program: Develop, implement, and maintain a comprehensive GRC strategy and supporting documentation that aligns with Collectors’ goals and objectives

• Policy Oversight: Own the policy management lifecycle for all Security policies at Collectors’, ensuring industry best practices and audit requirements are captured and understood by the organization

• Policy and Audit Compliance: Act as the primary liaison to other teams at Collectors’ to ensure alignment with internal policies and compliance frameworks, and drive remediation activities where necessary

• Audit Readiness and Oversight: Provide expertise and guidance to Collectors as we align with industry standard audit frameworks, and drive the audit process

• Risk Management: Own Collectors’ third party risk management and internal risk reporting processes to ensure that business owners are able to make risk informed decisions

Who You Are:

• 12+ years of overall GRC experience, with at least 4+ years running a GRC program, with a focus on ensuring audit readiness and alignment with industry best practices

• Hands on experience preparing for and facilitating SOC2, ISO27001, NIST CSF and/or PCI audits

• High attention to detail and a commitment to upholding the highest standards of data security and compliance.

• Excellent problem-solving skills, with the ability to work independently and handle multiple tasks.

• The ability to drive clear next steps when encountering ambiguous spaces without clear lines of ownership.

• Familiarity with a broad range of technical concepts relevant to cloud computing environments: logical access, agile development process, security architecture, information security, network security, and privacy.

• Bachelors in CS, Cybersecurity or related fields and certifications such as CISM, CISSP, CISA, CRISC or any other professional certification is good to have

Salary Range: 

The salary range for this position is $179,403 to $291,265. Actual compensation on this range varies based on a variety of non-discriminatory factors, including location, job level, experience, and skill set. This role may be eligible for bonuses, commissions, or other forms of compensation, please ask your recruiter for details.

Reasons To Join Us:

• Health Insurance: All full-time employees are eligible to enroll in Medical, Dental, and Vision

• Additional Benefits: Full-time employees are eligible for fertility, commuter, and educational assistance benefits.

• 401(K) Matching Plan: We are proud to offer a competitive 401k matching plan to our employees to support their future financial goals

• Vacation: All salaried employees are eligible for flexible time-off.

• Holiday Pay: All regular, full-time employees are eligible for ten company paid holidays

• Employee Discounts: Employees receive discounts on select grading services for approved submissions

• Flexible Hours: Many of our teams offer flexible schedules with varying shifts and will work with you to accommodate your needs

• Fun Working Environment: Our team members are invited to participate in celebrations, holiday events, and team building activities

• Additional Resources from our technology team: Collectors Tech Blog and Our Engineering Story 

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. 

#Li-Remote

#Bi-Remote

#Bi-Hybrid

Candidates must be authorized to work in the United States.

Collectors uses e-Verify to validate your ability to work legally in the United States.

We are aware that there are instances where individuals are receiving job offers that fraudulently allege to be from Collectors or one of our business units. This type of fraud can be carried out through false websites, through fake e-mails claiming to be from the company or through social media. We never ask for personal information such as your bank account, Social Security numbers or National IDs, nor do we send or request payments for the purchase of business-related equipment. If you suspect fraud, please reach out to [email protected].

We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We believe that a team that represents a variety of backgrounds, perspectives, and skills will better service the diverse community of collectors we support.

If you require an accommodation to apply or interview with us due to a disability or special need, please email [email protected].

U.S. residents: for disclosures relating to personal information we collect during the employment application and recruitment process, please see our Privacy Notice for U.S. Applicants.

If you are based in California, you can read information for California residents here.