Senior Governance, Risk, and Compliance Engineer, Postman
$180-200k
+ Equity
5+ days a week in office
Collaboration platform for API development
Be an early applicant
Collaboration platform for API development
1001+ employees
Be an early applicant
$180-200k
+ Equity
5+ days a week in office
1001+ employees
Company mission
To simplify each step of building an API and streamline collaboration to help create better APIs—faster.
Role
Who you are
- The ideal candidate has experience implementing and maturing compliance programs, including SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and FedRAMP, and can translate security and risk requirements into practical engineering solutions
- 6+ years of cybersecurity GRC experience in high-growth technology environments
- Experience implementing and maturing GRC programs with pragmatic, engineered solutions
- Knowledge of SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and/or FedRAMP
- Proficiency in Python, JavaScript, or similar for production-grade automation
- Experience integrating GRC tooling with ticketing, identity, asset management, and cloud platforms
- Experience with AI-assisted workflows or LLM-powered tooling
- Strong communication skills translating risk into engineering requirements
- Bachelor's degree or equivalent experience
What the job involves
- The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs
- In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman
- We seek a Senior GRC Engineer who combines deep GRC expertise with strong engineering skills to build and scale automation across governance, risk, and compliance
- This is a hands-on technical role focused on designing and operating GRC tooling, integrations, and AI-assisted workflows that reduce manual effort while improving security assurance
- As a senior member of the Security GRC team, you will partner with Security, Engineering, IT, Legal, Sales, and other stakeholders to shape Postman's GRC strategy
- You will own key compliance initiatives, drive continuous controls monitoring, build scalable automation, and serve as a trusted technical advisor on risk and compliance
- Design, build, and operate GRC automation across evidence collection, control testing, risk tracking, and compliance reporting
- Build integrations between GRC workflows and internal systems using code, workflow automation, low-code platforms, or AI-assisted tooling
- Lead SOC 2, ISO 27001, HIPAA, and FedRAMP initiatives, owning at least one certification end-to-end
- Drive continuous controls monitoring and automated evidence collection
- Lead technical risk assessments and control implementation with cross-functional stakeholders
- Improve audit readiness through automation and process optimization
- Mentor teammates and influence GRC strategy
Our take
Postman is a SaaS collaboration platform designed to streamline API development teams. APIs serve as the backbone for communication and data sharing across numerous applications, playing a pivotal role in today's device-centric landscape. The platform offers tools for testing, version control, and documentation, ensuring the efficient production of APIs.
Initially founded in Bangalore, Postman has since relocated its headquarters to San Francisco. With a prestigious clientele including X, Shopify, and Intuit, the platform boasts over 40M developers and 500,000 organizations worldwide. Postman actively engages with the API developer community through various initiatives, such as hosting hackathons with enticing cash prizes.
The growing reliance on APIs to fuel digital transformation, compounded by the widespread shift to remote work and digitalization, highlights their critical importance. Moreover, the sensitive nature of APIs, given the data they transmit and the potential security risks, accentuates the need for robust development practices. Hence, Postman has thrived as companies seek to develop secure APIs efficiently to meet evolving demands.
Steph
Company Specialist at Welcome to the Jungle
Insights
51% employee growth in 12 months
Company
Company benefits
- Health care: Based on where you're located and the plans available there, you can have up to 100% of your and your family's premium costs covered by Postman, or receive a generous monthly allowance to supplement existing medical coverage
- Unlimited PTO: All full-time Postman employees have unlimited paid time off (PTO). We strongly encourage everyone to exercise this benefit to ensure that personal and work lives remain well-balanced, healthy, and fully charged. Your body, mind, spirit, and loved ones will appreciate it!
- Supporting healthy meals: We want to ensure you eat healthy each day. It's why we provide a taxable monthly stipend so that you can be nourished throughout the week
- Play well, be well: We're serious about your wellness. Whether it's a boxing club membership, hula classes, or a longboard, we're here to cheer you on to get out and get moving. We'll reimburse you for activities and items that bring you joy through our wellness and fitness program
- Career development: We support your career development by providing access to unlimited courses on Udemy and a book allowance. Enhance and uplevel your skills, and even learn something completely new!
Company HQ
Financial District, San Francisco, CA
Leadership
Abhinav Asthana
(Founder & CEO)They began their career as CTO of BITS360, which they co-founded in 2007, before co-founding Grayscale Design and TeliportMe. They used this entrepreneurial experience to co-found Postman in October 2014, aiming to simplify API development.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 62 more jobs at Postman