Senior GRC Analyst, Postman
$200-250k
+ Equity
3 days a week in office
Collaboration platform for API development
Be an early applicant
Collaboration platform for API development
1001+ employees
Be an early applicant
$200-250k
+ Equity
3 days a week in office
1001+ employees
Company mission
To simplify each step of building an API and streamline collaboration to help create better APIs—faster.
Role
Who you are
- We seek a Senior GRC Analyst with extensive experience implementing, managing, and maturing compliance programs, including but not limited to SOC 2, ISO 27xxx, HIPAA, GDPR, CCPA, and FedRAMP
- This role must possess a significant level of technical knowledge that allows for clear communication with engineering stakeholders and the ability to provide actionable guidance and recommendations on processes (e.g. translate risk language to engineering requirements)
- In addition to technical acumen, the role requires an individual who is results-oriented and pragmatic and demonstrates effective problem-solving and communication skills
- The Senior GRC Analyst often serves as a subject matter expert for colleagues and line-of-business managers, and experience with multiple technologies, compliance requirements and risk management methodologies is crucial
- 7+ years of hands-on experience in cybersecurity governance, risk, and compliance, preferably within fast-paced technology companies
- Bachelor’s degree in computer science, information security/cybersecurity, or related field or relevant work experience
- Relevant certifications such as CISSP, CRISC, CISA, or CISM a plus
- Knowledge of and experience implementing, managing, and maturing GRC programs with a bias to action, ability to design effective but pragmatic solutions with an ability to balance short term and long term goals
- Proficient technical knowledge and familiarity with management information systems, cybersecurity, audits and internal controls
- Experience working with engineering and non-engineering stakeholders to drive successful risk activities
- Experience with establishing and maturing third party risk management programs, with a proven ability to balance third party risk with business need
- Experience identifying gaps, creating and tracking correction action and mitigation plans to closure at scale
- Self-motivated and well-organized to accomplish goals and tasks completely and on time
- Experience successfully driving risk & compliance programs in globally distributed organizations
What the job involves
- The Senior GRC Analyst role will be part of the Security GRC team at Postman. The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs
- In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman
- As a senior member of the Security GRC team, this role will be instrumental in guiding the strategy of the GRC program in partnership with senior management
- Lead and coordinate high visibility projects for our risk & compliance roadmap, including: SOC2, ISO 27XXX, HITRUST, and FedRAMP
- Contribute to the development, management, and ongoing improvement of the company risk program, compliance initiatives, and overall security risk posture
- Lead the development and maturity of critical risk domains such as third party risk management and business resilience
- Lead critical control activities with stakeholders across the business, quantifying risks, evaluating mitigations, and driving action to measurably reduce risk
- Lead, participate, and innovate on processes to streamline compliance audit activities with external auditors and internal control owners to ensure successful completion of audit requirements with minimal toil
- Establish and contribute to risk and compliance activities with an eye toward continuous controls monitoring automation
- Act as a mentor, advisory, and escalation point for team members and stakeholders
Our take
Postman is a SaaS collaboration platform designed to streamline API development teams. APIs serve as the backbone for communication and data sharing across numerous applications, playing a pivotal role in today's device-centric landscape. The platform offers tools for testing, version control, and documentation, ensuring the efficient production of APIs.
Initially founded in Bangalore, Postman has since relocated its headquarters to San Francisco. With a prestigious clientele including X, Shopify, and Intuit, the platform boasts over 15M developers worldwide. Postman actively engages with the API developer community through various initiatives, such as hosting hackathons with enticing cash prizes.
The growing reliance on APIs to fuel digital transformation, compounded by the widespread shift to remote work and digitalization, underscores their critical importance. Moreover, the sensitive nature of APIs, given the data they transmit and the potential security risks, accentuates the need for robust development practices. Hence, Postman has thrived as companies seek to develop secure APIs efficiently to meet evolving demands.
Steph
Company Specialist at Welcome to the Jungle
Insights
51% employee growth in 12 months
Company
Company benefits
- Health care: Based on where you're located and the plans available there, you can have up to 100% of your and your family's premium costs covered by Postman, or receive a generous monthly allowance to supplement existing medical coverage
- Unlimited PTO: All full-time Postman employees have unlimited paid time off (PTO). We strongly encourage everyone to exercise this benefit to ensure that personal and work lives remain well-balanced, healthy, and fully charged. Your body, mind, spirit, and loved ones will appreciate it!
- Supporting healthy meals: We want to ensure you eat healthy each day. It's why we provide a taxable monthly stipend so that you can be nourished throughout the week
- Play well, be well: We're serious about your wellness. Whether it's a boxing club membership, hula classes, or a longboard, we're here to cheer you on to get out and get moving. We'll reimburse you for activities and items that bring you joy through our wellness and fitness program
- A room with a view: We want you set up for success! To help make your home office comfortable, we'll provide a one-time reimbursement for your office set-up and headphones. Internet and phone costs are also reimbursable on a monthly basis
- Career development: We support your career development by providing access to unlimited courses on Udemy and a book allowance. Enhance and uplevel your skills, and even learn something completely new!
Company HQ
Financial District, San Francisco, CA
Leadership
Abhinav Asthana
(CEO)They began their career as CTO of BITS360, which they co-founded in 2007, before co-founding Grayscale Design and TeliportMe. They used this entrepreneurial experience to co-found Postman in October 2014, aiming to simplify API development.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 49 more jobs at Postman