Postman

Postman

Privacy & Commercial Counsel

San Francisco, California, United States

Sponsorship not specified$190k-$230kDetected 15 days ago
Cloud PlatformsComplianceStakeholder ManagementNegotiationContract ManagementPrivacy LawPostmanHIPAAResearchLeadershipCommunicationCollaboration

About the role

  • Reporting to the Managing Counsel, Commercial, you will sit within the Commercial Legal team and serve as the primary point of contact for privacy questions that surface in the course of commercial transactions.
  • You will work closely with the team under Managing Counsel, Compliance, including Sr.
  • In practice, we expect roughly 70-80% of your time on privacy-related work and 20-30% supporting the broader commercial deal pipeline.

Responsibilities

  • Serve as the primary legal resource for privacy questions arising in commercial transactions, including enterprise customer deals, vendor agreements, and partner contracts.
  • Manage a high volume of customer and prospect privacy questionnaires, security questionnaires, and due diligence requests, working with Security and Compliance teams to provide accurate, timely responses.
  • Advise Sales, Deal Operations, and Partner teams on privacy-related deal issues, translating complex regulatory requirements into clear, actionable guidance that non-lawyers can apply.
  • Maintain and update Postman's DPA templates, privacy-related contract clauses, and negotiation playbooks to reflect changes in law, product, and commercial practice.
  • Partner with Sr. Privacy Counsel, Product Counsel, and AI & Security Counsel to translate the privacy components of new products, features, and services into commercial terms and customer-facing documentation.
  • Develop and maintain privacy-related FAQs, decision trees, and self-serve resources that enable Legal team members, Sales, and Deal Ops, to handle routine privacy questions without attorney involvement.
  • Commercial Deal Support
  • Support enterprise and mid-market commercial transactions beyond privacy as capacity allows, including reviewing subscription agreements, order forms, and related deal documents.
  • Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration-enabling users to create better APIs, faster.
  • Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners.

Requirements

  • 5-8 years of legal experience with a meaningful focus on data privacy and commercial transactions, including substantial in-house experience at a technology company.
  • Deep working knowledge of GDPR, UK GDPR, CCPA/CPRA, and international data transfer mechanisms (SCCs, UK Addendum, transfer risk assessments).
  • Experience managing high volumes of customer privacy and security questionnaires with speed and accuracy.
  • Exceptional ability to balance precision with pace.
  • Strong stakeholder management skills, with a demonstrated ability to advise Sales teams on privacy matters in language they can act on.
  • Ability to simplify complex privacy regulations for non-privacy attorneys, sales teams, and business stakeholders without sacrificing accuracy.
  • Experience with AI tools applied to legal workflows (contract review, research, drafting, questionnaire management).
  • The right candidate will combine deep knowledge of global privacy frameworks with the speed, commercial instinct, and stakeholder management skills needed to operate in a high-growth enterprise SaaS environment.

Nice to have

  • CIPP/US, CIPP/E, or CIPM certification
  • Experience drafting and negotiating Business Associate Agreements (BAAs) under HIPAA, including familiarity with the interplay between BAA requirements and standard DPA terms in enterprise SaaS transactions.
  • Experience with privacy aspects of AI-related products and services, including model training, usage data, and AI governance frameworks.
  • Familiarity with B2B SaaS product architectures and how data flows through API platforms, cloud infrastructure, and third-party integrations.
  • Experience supporting cloud marketplace transactions or technology partnerships where privacy and data handling are key negotiation points.
  • Prior experience working alongside a dedicated privacy program team while owning the commercial-facing privacy workstream.
  • Familiarity with SOC 2, ISO 27001, and other security frameworks as they intersect with commercial privacy requirements.
  • Experience with CLM platforms (Ironclad or similar).

Compensation

  • The reasonably estimated base salary for this role ranges from $190,000 to $230,000, plus a competitive equity package.

Benefits

  • P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman.

Company info

  • The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded.

Equal opportunity

  • Postman is an Equal E
Apply directly at Postman →Create a free account for alerts like thisView Postman immigration profile

This listing is sourced directly from Postman's careers page and normalized into a canonical job model.