Security Awareness Manager

Who Are We?

Postman is the world's leading collaboration platform for API development. Postman's features simplify each step of building an API & streamline collaboration to help create better APIs—faster. More than 35 million developers & 500,000 organizations worldwide use Postman today, and we continue to strive humbly towards our mission of 100 million connected developers & serving companies as they seek to innovate in an API-first world. Our customers are doing more and more astounding things with the Postman product every day, and as a result, we are growing rapidly.

We highly recommend reading The "API-First World" graphic novel to understand the bigger picture & our vision at Postman.

The Opportunity

We are seeking a Security Awareness Manager to lead the development and implementation of a comprehensive security awareness program. You will play a critical role in helping shape our organization's security culture by developing strategies, KPIs, and initiatives to promote security awareness and safe behaviors across the organization. This role requires a proactive, creative thinker who can translate complex security topics into engaging and understandable content. You will work closely with other security leaders and teams to ensure that the program aligns with our overall security objectives and company values.

What You’ll Do: 

• Develop and Execute the Security Awareness Program: Lead the creation and continuous evolution of a robust security awareness strategy that educates employees on best practices, identifies key risk areas, and fosters a culture of security mindfulness.

• Content Creation: Write and distribute engaging security awareness materials, including weekly emails, training modules, blogs, and other communications, tailored to various levels of technical knowledge within the organization.

• KPI Development and Monitoring: Establish measurable goals for the security awareness program and track its effectiveness using key performance indicators (KPIs). Regularly assess the success of initiatives and recommend improvements.

• Campaign Management: Plan and execute targeted security awareness campaigns focusing on various aspects of cybersecurity, such as phishing prevention, secure password practices, and compliance with organizational policies.

• Phishing Simulations: Develop and manage phishing simulations and security assessments to evaluate employee readiness and susceptibility to attacks.

• Cross-Team Collaboration: Collaborate with security teams and other departments to ensure alignment between security awareness initiatives and the broader organizational goals.

• Training and Education: Continuously update and revitalize security awareness training programs to reflect current trends and threats. Incorporate engaging, modern solutions and other interactive platforms to ensure content resonates with employees and remains aligned with emerging cybersecurity risks and best practices.

• Report on Progress: Regularly report program effectiveness, awareness levels, and any identified risks to leadership, providing insights for improvement.

Requirements:

• 6+ years of experience in security awareness, cybersecurity, or a related role.
• Proven experience in designing and delivering security awareness programs and content.

Skills:

• Strong writing and communication skills with an ability to simplify complex security concepts for a broad audience.
• Knowledge of information security principles, standards, and compliance frameworks (e.g., NIST, ISO 27001).
• Experience with creating and running phishing simulations or similar security assessments.
• Data-driven mindset with experience in defining and tracking KPIs to measure program success.
• Familiarity with learning management systems (LMS) and security awareness training tools is a plus.

• Certifications: Security certifications like Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are beneficial.

• Soft Skills: Strong organizational skills, attention to detail, ability to handle multiple projects, and a passion for cultivating a security-fi