Compliance and Privacy Officer

Toku; Canada; Remote; CAD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as a Compliance and Privacy Officer, where you'll lead the charge in ensuring adherence to critical regulatory standards like GDPR and ISO 27001. This pivotal role combines technical expertise and strategic leadership, allowing you to shape the future of compliance in the evolving crypto industry. With a strong backing and a rapidly growing client base, you will have the opportunity to work alongside innovative clients and engaged investors. If you're passionate about data protection and want to make a significant impact in a fast-paced startup environment, this is the role for you.

Benefits

Competitive salary

Equity options

Remote-friendly work culture

Diverse team environment

Qualifications

• 4-8 years of experience in security/privacy engineering in fintech or HRIS.
• Proven track record managing GDPR, SOC2, or ISO 27001 implementations.

Responsibilities

• Oversee GDPR compliance and lead certification efforts.
• Develop security protocols and conduct system audits.
• Establish company-wide privacy and security training initiatives.

Skills

GDPR Compliance

Security Protocols

Data Protection

Communication Skills

Vulnerability Assessments

Encryption Standards

Network Security

Education

Bachelor’s Degree

Master’s Degree

Tools

TrustArc

Drata

Job description

About Toku

Toku is the leading provider of compliance infrastructure for crypto companies, enabling them to pay employees in tokens and stablecoins while staying compliant with state, federal, and international tax laws. Our growing client list includes 30% of the crypto companies listed on Robinhood.

Backed by $26M from leading investors including Blockchain Capital and Naval Ravikant, Toku is scaling rapidly to meet the demand for compliance solutions in the evolving regulatory environment. Read more about Toku in Fortune, Yahoo Finance, and CoinDesk.

To learn more, check our website.

As Toku’s Compliance and Privacy Officer, you’ll lead privacy and security programs, ensuring adherence to regulatory standards like GDPR, SOC2, and ISO 27001. This pivotal role combines technical expertise and strategic leadership to ensure regulatory adherence and data protection, shaping the future of compliance in the evolving crypto industry.

What you'll do

• Oversee Privacy and Compliance Frameworks:
• Oversee GDPR compliance practices and drive certification efforts with TrustArc/eTrust, a leading privacy compliance governance certifier.
• Design and execute privacy and security programs aligned with regulatory frameworks (e.g., SOC2, GDPR, ISO 27001).
• Lead security and privacy program initiatives collaboratively across teams.
• Act as a point of contact for privacy-related inquiries and audits.

• Manage Security Protocols:
• Develop and implement security protocols to ensure data integrity and protection.
• Conduct system security audits and penetration testing.
• Define access control measures, encryption standards, and secure data transfer protocols.

• Technical Leadership:
• Lead vulnerability assessments and remediation strategies.
• Collaborate with engineering teams to integrate privacy-by-design and security-by-design principles.

• Develop Training Programs:
• Establish company-wide privacy and security training initiatives.
• Stay current with evolving regulations and security threats, adapting strategies accordingly.

What we’re looking for

• Bachelor’s or Master’s degree.
• 4-8 years of experience driving security/privacy engineering, business practices, and programs in a fintech SaaS or HRIS/payroll platform.
• Proven track record managing GDPR, SOC2, or ISO 27001 implementations.
• Strong understanding of encryption, authentication, and network security.
• Familiarity with compliance management platforms like TrustArc or Drata.
• Excellent written and verbal communication skills with the ability to simplify complex ideas for diverse audiences.

Certificates preferred

• Certified Information Systems Security Professional (CISSP).
• Certified Information Privacy Professional (CIPP/E, CIPP/US) ISO 27001.
• Lead Implementer certification.

Why you’ll love working at Toku

• Shape the future of the crypto compliance space during a pivotal regulatory moment.
• Work alongside innovative clients and highly engaged industry-leading investors.
• Join a fast-growing startup with a clear market need and a strong product-market fit.
• Competitive salary, equity, and remote-friendly work culture.

Toku is an equal opportunity employer, and we are committed to being a diverse team that reflects a broad range of background, thought, and experience. We do not discriminate based on race, color, religion, sex, gender identity, sexual orientation, age, national origin, status as an individual with a disability, status as protected veteran, or any other legally protected characteristics. Women, minorities, LGBTQ+, and people from underrepresented backgrounds are strongly encouraged to apply.