Security Assurance Manager, Postman
$208-244k
+ Equity package
3+ days a week in office
Collaboration platform for API development
Open for applications
Collaboration platform for API development
1001+ employees
Open for applications
$208-244k
+ Equity package
3+ days a week in office
1001+ employees
Company mission
To simplify each step of building an API and streamline collaboration to help create better APIs—faster.
Role
Who you are
- 5-7 years of hands-on cyber risk, governance, and compliance leadership
- Proven experience developing or maturing GRC programs, preferably within a high-growth Cloud/SaaS environment
- Passionate and creative in the use of technology to streamline and automate manual processes
- Experience with—and enthusiasm for—working with global, distributed teams
- Alignment with Postman’s values (you can find them listed on our careers page)
- An innate curiosity about how things work
- Lots of smiles
What the job involves
- We’re looking for an experienced GRC leader to build out and scale our governance, risk, compliance, and privacy functions, as well as design and develop the appropriate programs and frameworks to cover Postman’s cyber risk and security assurance obligations
- Your mission, should you choose to accept it, will be to lead the operationalization of Postman’s automated governance, risk, and compliance (GRC) programs while also driving efforts to mature and optimize Postman’s security policies, risk management processes, and compliance with standards and regulations such as SOC2, ISO, NIST, GDPR, CCPA, HIPAA, FedRamp and PCI
- Cybersecurity is essential to what we do at Postman
- Postman’s security team is responsible for cybersecurity across the entire organization, from employees to partners to customers
- We help Postman design, build, deploy, and maintain secure software to ensure we're protecting every customer’s data and their investment in our products
- We also focus on providing security intelligence and building tools to enable all “Postmanauts” (i.e. , everyone who works at Postman) to feel a shared sense of responsibility for security and privacy concerns
- Finally, we aim to constantly improve the security posture of our organization by iterating on our tooling and process
- Develop and manage Postman’s security governance framework and cyber risk program to maintain the company’s compliance obligations
- Manage and mature Postman’s security policy framework, vendor risk management, and security assurance programs
- Recruit and manage a lean team of remote cyber risk professionals to simplify processes and relieve operational burdens
- Partner with business and engineering leaders to identify and evaluate risks/controls and make suggestions on mitigation strategies
- Work with key stakeholders to help guide the program and drive prioritization of risks for the company
- Work with cross-functional teams and leadership to drive organizational adoption efforts
- Implement the use of technology to streamline and automate manual controls
- Manage legal, regulatory, and contractual compliance obligations
- Create and manage the company’s vendor risk management program
Our take
Postman is a SaaS collaboration platform designed to streamline API development teams. APIs serve as the backbone for communication and data sharing across numerous applications, playing a pivotal role in today's device-centric landscape. The platform offers tools for testing, version control, and documentation, ensuring the efficient production of APIs.
Initially founded in Bangalore, Postman has since relocated its headquarters to San Francisco. With a prestigious clientele including X, Shopify, and Intuit, the platform boasts over 15M developers worldwide. Postman actively engages with the API developer community through various initiatives, such as hosting hackathons with enticing cash prizes.
The growing reliance on APIs to fuel digital transformation, compounded by the widespread shift to remote work and digitalization, underscores their critical importance. Moreover, the sensitive nature of APIs, given the data they transmit and the potential security risks, accentuates the need for robust development practices. Hence, Postman has thrived as companies seek to develop secure APIs efficiently to meet evolving demands.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Health care: Based on where you're located and the plans available there, you can have up to 100% of your and your family's premium costs covered by Postman, or receive a generous monthly allowance to supplement existing medical coverage
- Unlimited PTO: All full-time Postman employees have unlimited paid time off (PTO). We strongly encourage everyone to exercise this benefit to ensure that personal and work lives remain well-balanced, healthy, and fully charged. Your body, mind, spirit, and loved ones will appreciate it!
- Supporting healthy meals: We want to ensure you eat healthy each day. It's why we provide a taxable monthly stipend so that you can be nourished throughout the week
- Play well, be well: We're serious about your wellness. Whether it's a boxing club membership, hula classes, or a longboard, we're here to cheer you on to get out and get moving. We'll reimburse you for activities and items that bring you joy through our wellness and fitness program
- A room with a view: We want you set up for success! To help make your home office comfortable, we'll provide a one-time reimbursement for your office set-up and headphones. Internet and phone costs are also reimbursable on a monthly basis
- Career development: We support your career development by providing access to unlimited courses on Udemy and a book allowance. Enhance and uplevel your skills, and even learn something completely new!
Company values
- Create with curiosity: We repeatedly ask, “Why?” and challenge best practices. Asking “Why?” and “Why not?” is how we start each experimental journey, with a willingness to fail until we succeed. At Postman, no star is too far to shoot for
- Earn trust: We seek input first and listen before taking action. We're always open to perspectives because a diversity of thought and discussion improves our chances of discovering the best solutions
- Embrace constraints: We see constraints as an opportunity to be creative and resourceful with the people and tools we have available to us
- Win together: We count on each other, always offer help, and focus on solutions. We are a hybrid workplace spanning the globe, but Postmanauts are part of a tight, trusting community that appreciates each person's contributions toward Postman's mission
- Own & deliver: We learn from our mistakes and adapt with ease. We push ourselves to take bold but smart risks, and we celebrate failures for the learnings we gain as a result
Company HQ
Financial District, San Francisco, CA
Articles
Leadership
Abhinav Asthana
(CEO)They began their career as CTO of BITS360, which they co-founded in 2007, before co-founding Grayscale Design and TeliportMe. They used this entrepreneurial experience to co-found Postman in October 2014, aiming to simplify API development.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 46 more jobs at Postman