Sr Manager, Information Security and Compliance

The role

The Sr Manager of Information Security and Compliance will lead the organization's information security strategy and operations. This role involves designing and managing security measures for cloud and on-premise infrastructure while leading a team of security professionals.

What you will do

• Develop and execute a comprehensive information security strategy
• Ensure compliance with data privacy regulations including PCI DSS, Philippines/Malaysia DPAs, and CCPA
• Maintain and ensure compliance with the company's information security management system
• Lead the design, implementation, and maintenance of secure cloud-based and on-premise infrastructure
• Work with internal stakeholders to ensure alignment on security practices
• Grow and manage a team of information security professionals
• Participate in production support and data breach incidents and drills
• Stay current with emerging security threats and adjust security measures

Required qualifications

• 8 to 10 years of IT experience
• Five or more years leading a team
• Experience implementing and managing information security management frameworks (PCI DSS, ISO 27001, SOC 2, etc.)
• Experience implementing and managing data privacy frameworks (GDPR, CCPA, etc.)
• Experience implementing and managing identity management systems and role-based access control
• Experience implementing and managing workstation and BYOD management applications
• Experience with security best practices for hybrid (cloud+on-premise) product and corporate infrastructure
• Strong prioritization and project management skills
• Resourceful and comfortable working independently in ambiguous situations
• Willing to work in-office 5 days a week, starting at 3am PHT Tuesday-Saturday to align with US hours

Nice to have

• Completed green-field security framework implementations at startups or other small-to-midsize companies
• Experience with scripting and APIs
• A practical, business-oriented approach to security practices
• Open and willing to take on additional responsibilities that may be outside of this role

About the company

Tarro builds products that empower small brick and mortar restaurants by providing a multi-product ecosystem including AI-enabled order taking, delivery enablement, payment solutions, and point-of-sale software. The company has been profitable for nearly a decade and was valued at $450M in mid-2022.