Security & Compliance Lead — SOC 2 & Privacy Champion

Toast; Vancouver; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Stock options

Health coverage

Flexible vacation

Access to CEO

Job summary

Toast, a fast-growing B2B SaaS company, is seeking a Security and Compliance Lead in Vancouver to own data protection, risk management, and trust as we scale.

You will lead SOC 2 Type 2 audits end-to-end, oversee the privacy program, manage subprocessor relationships, and collaborate with IT and Engineering to embed security into systems and processes. Strong communication and cloud security expertise are required.

Qualifications

• Experience in information security, risk, privacy, and compliance in B2B SaaS or cloud
• Hands-on SOC 2 Type 2 audit management
• Knowledge of SOC 2, ISO 27001, and NIST; GDPR/CCPA
• Excellent communication for security questionnaires and translating complex concepts
• Sound judgment balancing controls with pragmatic risk-taking
• Hands-on mindset; can drive progress across teams without direct authority
• Industry certifications such as CISSP, CISM, or CIPP/E are a plus
• Experience working with Legal on privacy/security terms in contracts
• Familiarity with AWS, GCP, or Azure is an asset
• Interest in applying AI to security and compliance

Responsibilities

• Serve as internal security expert guiding teams and customers through reviews
• Own the SOC 2 Type 2 audit process end to end, including evidence collection
• Oversee the privacy framework and manage subprocessor relationships
• Lead incident response, business continuity, and disaster recovery testing
• Partner with IT and Engineering to embed security into systems and processes
• Build security awareness through training and ongoing education

Skills

SOC 2 Type 2

ISO 27001

NIST

Privacy regulations

Audit coordination

Security programs

Communication skills

Cloud security

Risk management

Tools

AWS

GCP

Azure

Job description

Toast, a fast-growing B2B SaaS company, is seeking a Security and Compliance Lead in Vancouver to own data protection, risk management, and trust as we scale.

You will lead SOC 2 Type 2 audits end-to-end, oversee the privacy program, manage subprocessor relationships, and collaborate with IT and Engineering to embed security into systems and processes. Strong communication and cloud security expertise are required.