Governance, Risk and Control (SOX) Specialist
About this role
About Wonder
Everything’s on the menu at Wonder. Except compromise.
Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.
Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.
Join us as we work to make great food more accessible.
About Wonder
Everything’s on the menu at Wonder. Except compromise.
Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.
Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.
Join us as we work to make great food more accessible.
About the Role
Wonder is looking for a GRC specialist with a deep understanding of security risk management and the evolving threat landscape. In this role you will Develop and execute internal security risk assessments, track security maturity metrics and KPIs, and conduct control testing for IT systems supporting financial reporting. This role is key to supporting our audit readiness and compliance initiatives.
What You Bring to the Table
3–5 years of experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, HIPAA, IT audit and SOX compliance
Hands-on experience with SOX compliance, ITGCs, and the full audit lifecycle — scoping through remediation.
Experience planning and executing information security risk assessments and security control testing
Experience coordinating with internal or external auditors, including evidence gathering and walkthroughs.
Strong written and verbal communication skills; able to explain technical controls to nontechnical audiences.
High attention to detail and strong organizational skills with the ability to manage multiple workstreams simultaneously.
CISA, CRISC, CISSP, or equivalent certification highly preferred
New York / New Jersey Base Salary: $176,000-$183,500
Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.
Benefits
The benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands.
Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here.
A Final Note
At Wonder, we build the best teams by hiring with an objective lens — evaluating people for their potential while championing diversity, equity, and inclusion. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. As part of our commitment to fair and compliant hiring practices, Wonder participates in the federal government's E-Verify program to confirm employment eligibility. If you need an accommodation during the interview process, please let your recruiter know.
We look forward to hearing from you! We'll contact you via email or text to schedule interviews and share information about your candidacy.
Company at a glance
At Grubhub, we champion restaurants from coast to coast. Restaurants sit at the heart of communities. It’s our mission to strengthen their roots, deepen their connections, and increase the positive impact they have on people and society.
Grubhub, part of Wonder Group, delivers the best local, authentic cuisine right to diners’ doors—and new customers and billions in revenue to local businesses. Featuring over hundreds of thousands of merchants in over 4,000 cities nationwide, our innovative technology, user-friendly platforms, and streamlined delivery capabilities have made us an industry leader in the world of online food ordering.
Since we opened our doors in 2004, Grubhub has been opening doors all across the country. Bakery doors in Hyde Park, jibarito joint doors in Queens, and doors of opportunity all across the country. Join our team and help us open more.
Top Benefits
- Equity
- 401(k)
- Medical insurance
- Dental insurance
- Vision insurance
- Short term disability coverage
- Long term disability coverage
- Paid time off
- Paid vacation
- Paid sick leave
- Paid parental leave
- Discounted meals
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?