About this role
Who Are We?
Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster.
The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman.
P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman.
The Opportunity
Every enterprise deal Postman closes, every partner integration it launches, and every vendor it onboards more often than not involve privacy. As Privacy & Commercial Counsel, you will own the commercial privacy workstream that keeps these transactions moving: negotiating DPAs, responding to customer and partner privacy questionnaires, advising go-to-market teams on privacy-related deal issues, and translating regulatory requirements into contract language that counterparties can accept and Postman can operationalize.
Reporting to the Managing Counsel, Commercial, you will sit within the Commercial Legal team and serve as the primary point of contact for privacy questions that surface in the course of commercial transactions. You will work closely with the team under Managing Counsel, Compliance, including Sr. Privacy Counsel (who owns the privacy program), Sr Product Counsel, and AI & Security Counsel, particularly when updating templates and playbooks, escalating novel privacy issues, and translating the privacy dimensions of new products and services into commercial terms and customer-facing policies.
This role is heavily focused on privacy, with the opportunity to support commercial deal volume as capacity allows. In practice, we expect roughly 70-80% of your time on privacy-related work and 20-30% supporting the broader commercial deal pipeline. The right candidate will combine deep knowledge of global privacy frameworks with the speed, commercial instinct, and stakeholder management skills needed to operate in a high-growth enterprise SaaS environment.
What You'll Do
Commercial Privacy
• Serve as the primary legal resource for privacy questions arising in commercial transactions, including enterprise customer deals, vendor agreements, and partner contracts.
• Draft, review, and negotiate data processing agreements (DPAs), data protection addenda, and related privacy terms on both Postman paper and counterparty paper.
• Manage a high volume of customer and prospect privacy questionnaires, security questionnaires, and due diligence requests, working with Security and C