Manager, Security Assurance

22 Hours ago • 5-7 Years

About the job

SummaryBy Outscal

Postman seeks a Manager, Security Assurance with 5+ years of experience in building and scaling GRC programs, particularly in Cloud/SaaS environments. This role requires strong leadership, policy framework development, and experience in risk management processes. Proficiency with standards and regulations such as SOC2, ISO, NIST, GDPR, CCPA, HIPAA, FedRamp, and PCI is essential.

Who Are We?

Postman is the world's leading collaboration platform for API development. Postman's features simplify each step of building an API & streamline collaboration to help create better APIs—faster. More than 30 million developers & 500,000 organizations worldwide use Postman today, and we continue to strive humbly towards our mission of 100 million connected developers & serving companies as they seek to innovate in an API-first world. Our customers are doing more and more astounding things with the Postman product every day, and as a result, we are growing rapidly.

We highly recommend reading The "API-First World" graphic novel to understand the bigger picture & our vision at Postman.

The Opportunity

We’re looking for an experienced GRC leader to build out and scale our governance, risk, compliance, and privacy functions, as well as design and develop the appropriate programs and frameworks to cover Postman’s cyber risk and security assurance obligations. Your mission, should you choose to accept it, will be to lead the operationalization of Postman’s automated governance, risk, and compliance (GRC) programs while also driving efforts to mature and optimize Postman’s security policies, risk management processes, and compliance with standards and regulations such as SOC2, ISO, NIST, GDPR, CCPA, HIPAA, FedRamp and PCI.

Cybersecurity is essential to what we do at Postman. Postman’s security team is responsible for cybersecurity across the entire organization, from employees to partners to customers. We help Postman design, build, deploy, and maintain secure software to ensure we're protecting every customer’s data and their investment in our products. We also focus on providing security intelligence and building tools to enable all “Postmanauts” (i.e., everyone who works at Postman) to feel a shared sense of responsibility for security and privacy concerns. Finally, we aim to constantly improve the security posture of our organization by iterating on our tooling and process.

What You’ll Do:

  • Develop and manage Postman’s security governance framework and cyber risk program to maintain the company’s compliance obligations 

  • Manage and mature Postman’s security policy framework, vendor risk management, and security assurance programs.

  • Recruit and manage a lean team of remote cyber risk professionals to simplify processes and relieve operational burdens

  • Partner with business and engineering leaders to identify and evaluate risks/controls and make suggestions on mitigation strategies

  • Work with key stakeholders to help guide the program and drive prioritization of risks for the company

  • Work with cross-functional teams and leadership to drive organizational adoption efforts

  • Implement the use of technology to streamline and automate manual controls 

  • Manage legal, regulatory, and contractual compliance obligations

  • Create and manage the company’s vendor risk management program

About You:

  • 5-7 years of hands-on cyber risk, governance, and compliance leadership

  • Proven experience developing or maturing GRC programs, preferably within a high-growth Cloud/SaaS environment

  • Passionate and creative in the use of technology to streamline and automate manual processes 

  • Experience with—and enthusiasm for—working with global, distributed teams

  • Alignment with Postman’s values (you can find them listed on our careers page)

  • An innate curiosity about how things work

  • Lots of smiles

Our Values

At Postman, we create with the same curiosity that we see in our users. We value transparency & honest communication about not only successes, but also failures. In our work, we focus on specific goals that add up to a larger vision. Our inclusive work culture ensures that everyone is valued equally as important pieces of our final product. We are dedicated to delivering the best products we can.

What Else?

If the role is based in the greater San Francisco area, and the we are offering a base range of $208,000 to 244,000 plus a competitive equity package. Actual compensation is based on the candidate's skills, qualifications, and experience. In addition to our pay-on-performance philosophy, we offer a comprehensive set of benefits, including full medical coverage, flexible PTO, wellness reimbursement, and a monthly lunch stipend. Salaries will vary outside of the listed metropolitan areas & the U.S.

Equal Opportunity

Postman is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Postman does not accept unsolicited headhunter and agency resumes. Postman will not pay fees to any third-party agency or company that does not have a signed agreement with Postman.

 

$208.0K - $244.0K/yr (Outscal est.)
$226.0K/yr avg.
San Francisco, California, United States

About The Company

Karnataka, India (On-Site)

California, United States (Hybrid)

United States (On-Site)

United States (Remote)

United States (Remote)

California, United States (On-Site)

California, United States (On-Site)

California, United States (On-Site)

California, United States (Hybrid)

View All Jobs

Similar Jobs

HP - Education Business Account Manager

Lombardy, Italy (On-Site)

dentsu - Senior Paid Search Manager

England, United Kingdom (Hybrid)

dentsu - Project Manager

Jakarta, Indonesia (On-Site)

dentsu - Paid Social Manager

Tamil Nadu, India (On-Site)

dentsu - Performance Marketing Manager

Bangkok, Thailand (On-Site)

dentsu - Consulting Manager (m/w/d)

Hessen, Germany (Hybrid)

Maersk Careers - Intermodal Commercial Solutions Manager

Victoria, Australia (On-Site)

Maersk Careers - Paid Marketing Manager

Shanghai, China (On-Site)

Maersk Careers - Integrated Customer Experience Manager

South Holland, Netherlands (On-Site)

Similar Skill Jobs

dentsu - Senior Paid Search Manager

England, United Kingdom (Hybrid)

dentsu - UiPath Developer

Lisbon Edifício Ageas Tejo, Praça Príncipe Perfeito, N.º 2, 4.º, 1990 278 Lisboa (Hybrid)

dentsu - Senior MarTech Consultant (SFMC)

Prague, Czechia (Hybrid)

dentsu - Senior Cloud DevOps Engineer

Prague, Czechia (Hybrid)

dentsu - Webmethods Integration Consultant

Lisbon, Portugal (Hybrid)

dentsu - Operational Finance Analyst - AP

Lisbon, Portugal (Hybrid)

Maersk Careers - Senior Customer Experience Agent

Ho Chi Minh City, Vietnam (On-Site)

Maersk Careers - NEC One Team CX & MbM Processes Lead

Maharashtra, India (On-Site)

Maersk Careers - AR Manager

Maharashtra, India (On-Site)

Jobs in San Francisco, California, United States

CAE - Software Engineer Weapons Co-op

Texas, United States (On-Site)

CAE - Group Leader IT Civil

Texas, United States (On-Site)

Salesforce - Talent Attraction Partner (Contract)

Georgia, United States (Hybrid)

PlayStation Global - Senior Software Engineer

California, United States (On-Site)

PlayStation Global - Software Engineer Intern - Masters

California, United States (Hybrid)

The Pokemon Company International - Sr. Event Operations Manager

Washington, United States (Hybrid)

Activision - 2025 US Summer Internship - UI/UX Design

California, United States (On-Site)

Activision - 2025 US Summer Internship - Computer Graphics

California, United States (On-Site)

Activision - 2025 US Summer Internship - User Research

California, United States (On-Site)

Software Engineering Jobs

HP - Cloud Full Stack / Typescript developer

Catalonia, Spain (On-Site)

HP - Senior Cloud Engineer Technical Lead

Catalonia, Spain (On-Site)

HP - Software Engineer

State Of Rio Grande Do Sul, Brazil (On-Site)

CAE - Software Engineer Weapons Co-op

Texas, United States (On-Site)

CAE - Group Leader IT Civil

Texas, United States (On-Site)

dentsu - UiPath Developer

Lisbon Edifício Ageas Tejo, Praça Príncipe Perfeito, N.º 2, 4.º, 1990 278 Lisboa (Hybrid)

dentsu - Developer/ Engineer

Dgs India Remote (Remote)

dentsu - Senior Cloud DevOps Engineer

Prague, Czechia (Hybrid)

Maersk Careers - Lead Software Engineer

Karnataka, India (On-Site)

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug