Browse All Jobs
Job Description
Postman is seeking a Senior GRC Analyst to join their Security GRC team. This role is crucial for maintaining the company's security posture by ensuring compliance with regulations and contractual obligations. The Senior GRC Analyst will contribute to the development, management, and improvement of the company's risk program, compliance initiatives, and overall security risk posture. They will lead critical control activities, quantify risks, evaluate mitigations, and drive action to measurably reduce risk.

What this role involves:
  • Leading and coordinating high visibility projects for the risk & compliance roadmap.
  • Contributing to the development, management, and ongoing improvement of the company risk program.
  • Leading the development and maturity of critical risk domains such as third party risk management and business resilience.
  • Leading critical control activities with stakeholders across the business.
  • Leading, participating, and innovating on processes to streamline compliance audit activities.
  • Establishing and contributing to risk and compliance activities with an eye toward continuous controls monitoring automation.
  • Acting as a mentor, advisory, and escalation point for team members and stakeholders.

Requirements:
  • 7+ years of hands-on experience in cybersecurity governance, risk, and compliance.
  • Bachelor’s degree in computer science, information security/cybersecurity, or related field or relevant work experience.
  • Relevant certifications such as CISSP, CRISC, CISA, or CISM a plus.
  • Knowledge of and experience implementing, managing, and maturing GRC programs.
  • Proficient technical knowledge and familiarity with management information systems, cybersecurity, audits and internal controls.
  • Experience working with engineering and non-engineering stakeholders to drive successful risk activities.
  • Experience with establishing and maturing third party risk management programs.
  • Experience identifying gaps, creating and tracking correction action and mitigation plans to closure at scale.
  • Self-motivated and well-organized to accomplish goals and tasks completely and on time.
  • Experience successfully driving risk & compliance programs in globally distributed organizations.

What Postman offers:
  • Full medical coverage.
  • Flexible PTO.
  • Wellness reimbursement.
  • Monthly lunch stipend.
  • Creche allowance.
  • Team-building events.
  • Donation-matching program.
Apply Manually