Senior GRC Engineer

The Opportunity

The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs. In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman.

About You

• 6+ years of cybersecurity GRC experience in high-growth technology environments.
• Experience implementing and maturing GRC programs with pragmatic, engineered solutions.
• Knowledge of SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and/or FedRAMP.
• Proficiency in Python, JavaScript, or similar for production-grade automation.
• Experience integrating GRC tooling with ticketing, identity, asset management, and cloud platforms.
• Experience with AI-assisted workflows or LLM-powered tooling.
• Strong communication skills translating risk into engineering requirements.
• Bachelor's degree or equivalent experience

What You'll Do

• Design, build, and operate GRC automation across evidence collection, control testing, risk tracking, and compliance reporting.
• Build integrations between GRC workflows and internal systems using code, workflow automation, low-code platforms, or AI-assisted tooling.
• Lead SOC 2, ISO 27001, HIPAA, and FedRAMP initiatives, owning at least one certification end-to-end.
• Drive continuous controls monitoring and automated evidence collection.
• Lead technical risk assessments and control implementation with cross-functional stakeholders.
• Improve audit readiness through automation and process optimization.
• Mentor teammates and influence GRC strategy.

What Else?

• In addition to Postman's pay-on-performance philosophy, and a flexible schedule working with a fun, collaborative team, Postman offers a comprehensive set of benefits, including full medical coverage, flexible PTO, wellness reimbursement, and a monthly lunch stipend.
• Along with that, our wellness programs will help you stay in the best of your physical and mental health. Our frequent and fascinating team-building events will keep you connected, while our donation-matching program can support the causes you care about.
• We are building a long-term company with an inclusive culture where everyone can be the best version of themselves.

Equal opportunity

Postman is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Postman does not accept unsolicited headhunter and agency resumes. Postman will not pay fees to any third-party agency or company that does not have a signed agreement with Postman.