Security Awareness Manager

Who Are We?

Postman is the world's leading collaboration platform for API development. Postman's features simplify each step of building an API & streamline collaboration to help create better APIs—faster. More than 35 million developers & 500,000 organizations worldwide use Postman today, and we continue to strive humbly towards our mission of 100 million connected developers & serving companies as they seek to innovate in an API-first world. Our customers are doing more and more astounding things with the Postman product every day, and as a result, we are growing rapidly.

We highly recommend reading The "API-First World" graphic novel to understand the bigger picture & our vision at Postman.

The Opportunity

We are seeking a Security Awareness Manager to lead the development and implementation of a comprehensive security awareness program. You will play a critical role in helping shape our organization's security culture by developing strategies, KPIs, and initiatives to promote security awareness and safe behaviors across the organization. This role requires a proactive, creative thinker who can translate complex security topics into engaging and understandable content. You will work closely with other security leaders and teams to ensure that the program aligns with our overall security objectives and company values.

What You’ll Do: 

• Develop and Execute the Security Awareness Program: Lead the creation and continuous evolution of a robust security awareness strategy that educates employees on best practices, identifies key risk areas, and fosters a culture of security mindfulness.

• Content Creation: Write and distribute engaging security awareness materials, including weekly emails, training modules, blogs, and other communications, tailored to various levels of technical knowledge within the organization.

• KPI Development and Monitoring: Establish measurable goals for the security awareness program and track its effectiveness using key performance indicators (KPIs). Regularly assess the success of initiatives and recommend improvements.

• Campaign Management: Plan and execute targeted security awareness campaigns focusing on various aspects of cybersecurity, such as phishing prevention, secure password practices, and compliance with organizational policies.

• Phishing Simulations: Develop and manage phishing simulations and security assessments to evaluate employee readiness and susceptibility to attacks.

• Cross-Team Collaboration: Collaborate with security teams and other departments to ensure alignment between security awareness initiatives and the broader organizational goals.

• Training and Education: Continuously update and revitalize security awareness training programs to reflect current trends and threats. Incorporate engaging, modern solutions and other interactive platforms to ensure content resonates with employees and remains aligned with emerging cybersecurity risks and best practices.

• Report on Progress: Regularly report program effectiveness, awareness levels, and any identified risks to leadership, providing insights for improvement.

Requirements:

• 6+ years of experience in security awareness, cybersecurity, or a related role.
• Proven experience in designing and delivering security awareness programs and content.

Skills:

• Strong writing and communication skills with an ability to simplify complex security concepts for a broad audience.
• Knowledge of information security principles, standards, and compliance frameworks (e.g., NIST, ISO 27001).
• Experience with creating and running phishing simulations or similar security assessments.
• Data-driven mindset with experience in defining and tracking KPIs to measure program success.
• Familiarity with learning management systems (LMS) and security awareness training tools is a plus.

• Certifications: Security certifications like Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are beneficial.

• Soft Skills: Strong organizational skills, attention to detail, ability to handle multiple projects, and a passion for cultivating a security-first mindset within the organization.

Our Values

At Postman, we create with the same curiosity that we see in our users. We value transparency & honest communication about not only successes, but also failures. In our work, we focus on specific goals that add up to a larger vision. Our inclusive work culture ensures that everyone is valued equally as important pieces of our final product. We are dedicated to delivering the best products we can.

What Else?

The role is based in the greater San Francisco area, and the we are offering a base salary range of $175,000 to $200,000 plus a competitive equity package. Actual compensation is based on the candidate's skills, qualifications, and experience. In addition to our pay-on-performance philosophy, we offer a comprehensive set of benefits, including full medical coverage, flexible PTO, wellness reimbursement, and a monthly lunch stipend. Salaries will vary outside of the listed metropolitan areas & the U.S.

Equal Opportunity

Postman is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Postman does not accept unsolicited headhunter and agency resumes. Postman will not pay fees to any third-party agency or company that does not have a signed agreement with Postman.