Postmates runs one of the largest real-time delivery fleets in the country. Building a software platform that is reliable, scales, and stays agile under demanding product needs is a serious engineering challenge. Postmates isn’t just another ad platform or mobile app for delivering static user-generated content: We have real customers paying real money for a real service, all in minutes.

As a Compliance Security Engineer, you will be responsible for developing and maintaining Postmates’ security compliance program. We’re looking for an engineer who is well versed in today’s compliance standards (GDPR, SOC, PCI, NIST), and can dive head first into crafting solutions for securing everything from our complex cloud infrastructure to our in-office networks. You’ll also collaborate with our public policy team to help draft the future of cyber compliance and regulation (such as the CCPA).

What you’ll do:

• Develop Postmates’ compliance program, use learnings to form compliance standards for the industry along with our public policy team
• Act as a liaison between engineering, security, IT, and legal and report on various compliance related requirements
• Monitor and implement new compliance standards
• Function as the go-to person with an in depth understanding of our security and compliance nuances, data storage, and data flow
• Own pre-audit analysis, diligence for vendors or technologies under review
• Collaborate with external and internal auditors
• Support testing new features and products to make sure they meet all compliance requirements

What you bring:

• 5+ years of relevant experience in GRC / security
• Familiarity with one or more industry compliance standards and regulations, specifically PCI, SOC1/2, NIST, GDPR
• Demonstrate understanding of the software development lifecycle
• Experience building or assessing applications built in AWS and Google Cloud
• Strong written and verbal communication skills
• Experience working side-by-side with engineers
• Technical certifications in IT Audit or Security such as CISM, CISSP, CISA, etc.

Benefits:

• Competitive salary and generous stock option plan (stay aligned with the long-term value you create)
• Medical, dental and vision insurance
• Tasty, healthy lunches and snacks (mostly healthy, but very tasty)
• Impact-first work environment (no politics, no pandering)
• Huge company vision (we need you to build the future, not just maintain the status quo)