Senior GRC Engineer
Core
Design, build, and operate GRC automation, integrations, and AI-assisted workflows to reduce manual effort and improve security assurance for Postman's API platform.
Role type
Senior GRC Engineer (hands-on IC)
Builds
GRC tooling, integrations, and AI-assisted workflows for evidence collection, control testing, risk tracking, and compliance reporting.
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC program implementation and maturation, SOC 2/ISO 27001/HIPAA/GDPR/CCPA/FedRAMP compliance, Python/JavaScript for production automation, GRC tooling integration, AI/LLM workflow design, technical risk assessment, cross-functional stakeholder management
Preferred skills
Experience in high-growth technology environments, low-code platform usage
Technologies
Python, JavaScript, GRC tooling, ticketing systems, identity management, asset management, cloud platforms
Responsibilities
Design and operate GRC automation for evidence collection and control testing; Build integrations between GRC workflows and internal systems; Lead SOC 2, ISO 27001, HIPAA, and FedRAMP initiatives; Drive continuous controls monitoring; Lead technical risk assessments; Mentor teammates and influence GRC strategy
Seniority
Senior, hands-on IC
