Director, Information Security

Overview:

Toast is a leading restaurant management platform that empowers restaurants to streamline operations, improve efficiency, and enhance customer experiences. As we continue expanding globally, we are seeking a highly experienced and motivated Director of Information Security to lead and expand our security team in India. This role will drive the development and strategy for our Security team operations based in Bangalore, while ensuring alignment with our global security program. The Director will oversee cybersecurity programs, security compliance and cybersecurity risk management, while collaborating with teams in the US and Ireland for a unified approach.

By joining Toast, you will have the opportunity to make a significant impact on the security posture of a rapidly growing global company. You will be part of a dynamic and supportive team that is passionate about protecting our customers, employees, and data.

Key Responsibilities:

• Leadership and Team Building: Build and lead skilled Information Security, Governance, Risk and Compliance teams in India, fostering collaboration, innovation, and continuous improvement.
• Strategic Planning and Implementation: Develop and execute a comprehensive information security strategy aligned with Toast's business objectives and global security framework.
• Security Operations: Manage daily security operations, including incident response, vulnerability management, and threat intelligence. Lead security awareness initiatives to enhance the organization's defense posture.
• Compliance and Risk Management: Ensure compliance with relevant industry standards / regulatory requirements (e.g. SOX, PCI, SOC, etc) and internal policies. Proactively identify, assess, and mitigate compliance and security risks.
• Collaboration and Communication: Work closely with cross-functional teams, including Engineering, IT, Operations, Enterprise Risk, and Legal, to integrate security into all aspects of the business. Communicate effectively with senior leadership and stakeholders on security risks and initiatives.
• Innovation and Adaptation: Stay abreast of emerging security threats and technologies, and adapt security strategies and controls accordingly. Support security as a "culture of yes", unblocking engineering and product innovation wherever possible.

Qualifications:

• Extensive Experience: 10+ years of experience in information security, compliance, and risk management, with demonstrated success in leading security teams and initiatives.
• Strong Leadership Skills: Ability to inspire and motivate teams, build strong relationships, and influence at all levels of the organization.
• Technical Expertise: Expertise in cybersecurity technologies, risks and controls processes, best practices, and emerging threats.
• Strategic Thinking: Ability to develop and implement strategic security initiatives aligned with business goals. Creative and open to interpretation in security architecture and design. Not rigid in implementation of security standards.
• Problem Solving and Decision Making: Ability to analyze complex security issues, identify root causes, and develop effective solutions.
• Excellent Communication Skills: Ability to communicate technical concepts clearly and concisely to both technical and non-technical audiences.
• Industry Knowledge: Strong knowledge of security frameworks and regulations such as: PCI DSS, SOC, SOX, NIST CSF, and ISO 27001.

Additional Considerations:

• Experience in the technology, payment card or financial services industry is a plus.
• CISSP, CISM, or other relevant security certifications are highly desirable.
• Strong understanding of cloud security and data protection principles.
• Experience with security incident response and forensic investigations.
• Experience with supporting security in cutting-edge software or hardware development organization

Diversity, Equity, and Inclusion is Baked into our Recipe for Success

At Toast, our employees are our secret ingredient—when they thrive, we thrive. The restaurant industry is one of the most diverse, and we embrace that diversity with authenticity, inclusivity, respect, and humility. By embedding these principles into our culture and design, we create equitable opportunities for all and raise the bar in delivering exceptional experiences.

We Thrive Together

We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs. Our goal is to build a strong culture of connection as we work together to empower the restaurant community. To learn more about how we work globally and regionally, check out: https://careers.toasttab.com/locations-toast.

Apply today!

Toast is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact candidateaccommodations@toasttab.com.

------

For roles in the United States, It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.