Senior GRC Engineer

Ovii's Interpretation of the Role

The Senior GRC Engineer will design, build, and operate automation for governance, risk, and compliance at Postman. The role partners with security, engineering, legal, and sales teams to drive certification initiatives and continuous controls monitoring.

Role Snapshot

• Senior GRC Engineer
• Security governance automation
• Compliance certification ownership
• Cross‑functional stakeholder partnership
• AI‑assisted workflow development

Must-Have Requirements

• Python
• JavaScript
• GRC automation
• SOC 2
• ISO 27001
• HIPAA
• GDPR
• CCPA
• FedRAMP
• Integration with ticketing/identity/asset/cloud platforms
• cybersecurity GRC
• compliance program implementation
• Bachelor's degree or equivalent

Nice-to-Have Signals

• AI‑assisted workflows
• AI‑assisted workflow development

Work Setup

• Location: San Francisco, United States
• Work mode: ONSITE
• Remote scope: UNSPECIFIED
• Employment type: Full-Time

Eligibility Gates

• Visa sponsorship: no

Not Specified in JD

• Visa sponsorship
• Remote eligibility
• Travel requirement
• Coding test

What You'll Likely Work On

• Design, build, and operate automation for evidence collection, control testing, risk tracking, and compliance reporting
• Create integrations between GRC workflows and internal systems using code, low‑code platforms, or AI‑assisted tools
• Lead at least one certification initiative (SOC 2, ISO 27001, HIPAA, FedRAMP) end‑to‑end
• Drive continuous controls monitoring and automated evidence collection
• Conduct technical risk assessments and guide control implementation with cross‑functional stakeholders
• Improve audit readiness through process optimization and automation
• Mentor teammates and shape Postman's GRC strategy

Good Fit If You Have

• Strong communication skills for translating risk into engineering requirements
• Experience collaborating with security, engineering, legal, and sales teams
• Interest in AI‑assisted or LLM‑powered workflow automation