Sr Manager, Information Security and Compliance

Tarro; Pajo; On-site; PHP 60,000 - 120,000; Full time

Job summary

An innovative company is seeking a Sr Manager of Information Security and Compliance to lead their security strategy. In this role, you will develop comprehensive security measures, ensuring compliance with regulations like PCI DSS and CCPA while managing a skilled team of security professionals. You will play a pivotal role in safeguarding both cloud-based and on-premise infrastructures, aligning security practices with business objectives. This position offers a unique opportunity to contribute to the success of small businesses, making a tangible impact in a dynamic environment. If you are passionate about security and leadership, this role is perfect for you.

Qualifications

• 8-10 years of IT experience with 5+ years in a leadership role.
• Experience with PCI DSS, GDPR, and CCPA compliance frameworks.

Responsibilities

• Develop and execute information security strategy aligned with business goals.
• Ensure compliance with data privacy regulations and manage security incidents.

Skills

Information Security Management

Data Privacy Regulations

PCI DSS Compliance

Project Management

Team Leadership

Cloud Infrastructure

On-Premise Infrastructure

Scripting

Education

Bachelor's in Information Technology

Master's in Cybersecurity

Tools

ISO 27001

SOC 2

Identity Management Systems

Job description

About us:

Here at Tarro we build products that empower small brick and mortar restaurants by liberating them of the operational burden of running their business. We accomplish this by providing a frictionless connection between them and their customers through our platform. In-turn empowering them to focus on creating a better experience for their customers while helping their business thrive.

We obsess over placing our customers first and working backwards from there. When our customers succeed, we succeed!

To learn more about our culture, values and how you can be a part of helping mom & pop restaurants thrive, please visit us here!

What we’re looking for:

We are seeking a highly skilled and experienced Sr Manager of Information Security and Compliance to lead our organization’s information security strategy and operations. The ideal candidate will have a robust background in both cloud and on-premise infrastructure, a deep understanding of data privacy regulations, and extensive experience with PCI DSS compliance and other security frameworks. As a player-coach, the Sr Manager of Information Security will be both a hands-on contributor and a strategic leader, capable of designing, implementing, and managing comprehensive security measures while leading and developing a team of security professionals.

What you will accomplish:

1. You will develop and execute a comprehensive information security strategy aligned with business objectives, regulatory requirements, and risk profiles.
2. You will ensure compliance with relevant data privacy regulations, including PCI DSS, Philippines/Malaysia’s DPAs, CCPA, and others as needed.
3. You will maintain and ensure compliance with the company’s information security management system.
4. You will lead the design, implementation, and maintenance of secure cloud-based and on-premise infrastructure spanning our product and corporate environments.
5. You will work closely with internal stakeholders across various departments to ensure alignment on security practices and initiatives.
6. You will grow and manage a team of information security professionals.
7. You will participate in production support and data breach incidents and drills.
8. You will stay current with emerging security threats, vulnerabilities, and technologies, and proactively adjust security measures as necessary.

One year deliverables:

1. Readiness for PCI DSS Level I audit.
2. Compliance with CCPA and the Data Privacy Acts of the Philippines and Malaysia.
3. Role-based access control.
4. Solution for workstation management and BYOD at scale.

About you:

1. You have between 8 and 10 years of IT experience with five or more years leading a team.
2. You have experience implementing and managing the following services:
1. Information security management frameworks (PCI DSS, ISO 27001, SOC 2, etc.).
2. Data privacy frameworks (GDPR, CCPA, etc.).
3. Identity management systems and role-based access control.
4. Workstation and BYOD management applications.
5. Security best practices for hybrid (cloud+on-premise) product and corporate infrastructure.
3. You enjoy being a hands-on contributor, an influencer, and a leader, in equal measure.
4. You have strong prioritization and project management skills.
5. You are resourceful and are comfortable working independently in ambiguous situations.

Bonus points:

1. You have completed green-field security framework implementations at startups or other small-to-midsize companies.
2. You have experience with scripting and APIs.
3. You have a practical, business-oriented approach to security practices.
4. You are open and willing to take on additional responsibilities that may be outside of this role. We are a growing company!

If you do not meet all the requirements listed above which candidates rarely do, don't worry. We still encourage you to apply!

Tarro is committed to hiring the best team to empower small businesses to thrive. We believe that a diverse workforce is paramount to our success. We welcome talent from all backgrounds - including but not limited to - race, sexual orientation, gender identity, age, nationality, religion, veteran status, political affiliation, and disability.