Senior Manager of Information Security and Compliance
Full-TimeUpdated on 10/14/2026
No salary listed
Expert
Manila, Metro Manila, Philippines+2 moreMore locations: Dumaguete City, Negros Oriental, Philippines | Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia
In PersonFive days in-office per week, working Tuesday–Saturday starting at 3am PHT.
Cybersecurity
About the job
Requirements
Have 8 to 10 years of IT experience, including five or more years leading a team.
Have experience implementing and managing information security management frameworks such as PCI DSS, ISO 27001, and SOC 2.
Have experience implementing and managing data privacy frameworks such as GDPR and CCPA.
Have experience with identity management systems and role-based access control.
Have experience with workstation and bring-your-own-device management applications.
Have experience applying security best practices to hybrid cloud and on-premise product and corporate infrastructure.
Have strong prioritization and project management skills.
Be resourceful and comfortable working independently in ambiguous situations.
Be willing to work in-office five days a week, Tuesday through Saturday, starting at 3am PHT to align with US hours.
Responsibilities
Develop and execute an information security strategy aligned with business objectives, regulatory requirements, and risk profiles.
Ensure compliance with relevant data privacy regulations, including PCI DSS, the Philippines and Malaysia Data Privacy Acts, CCPA, and other applicable regulations.
Maintain the company’s information security management system and ensure its compliance.
Lead the design, implementation, and maintenance of secure cloud-based and on-premise infrastructure across product and corporate environments.
Work with internal stakeholders across departments to align security practices and initiatives.
Grow and manage a team of information security professionals.
Participate in production support, data-breach incidents, and drills.
Monitor emerging security threats, vulnerabilities, and technologies, and adjust security measures as needed.
Desired Qualifications
Have completed greenfield security framework implementations at startups or other small-to-midsize companies.
Have experience with scripting and APIs.
Apply a practical, business-oriented approach to security practices.
Be open and willing to take on additional responsibilities outside the role.
About us:
Here at Tarro we build products that empower small brick and mortar restaurants by liberating them of the operational burden of running their business. We accomplish this by providing a frictionless connection between them and their customers through our multi-product ecosystem offering AI-enabled order taking, delivery enablement, payment solutions, and point-of-sale software. At Tarro, we use a combination of bits (technology) and atoms (people) to solve real world problems facing small business owners.
We obsess over placing our customers first and working backwards from there. When our customers succeed, we succeed. The restaurant industry in the US is over a $1 trillion total addressable market (TAM), but remains relatively underserved by technology. Large chains are able to afford expensive tech that gives them a huge advantage; we believe that small restaurant owners deserve access to the same technologies at an affordable price.
Tarro has been profitable for nearly a decade and has seen 5x revenue growth in the past four years. As of our last fundraising round in mid-2022, we were valued at $450M and have since seen substantial growth across customer acquisition, product development, and company headcount. Thousands of loyal restaurants have entrusted Tarro with their success, and together we have supported nearly 20 million customers. We are proud to be named one of Built In’s top companies to work for in 2023.
We are seeking a highly skilled and experienced Sr Manager of Information Security and Compliance to lead our organization’s information security strategy and operations. The ideal candidate will have a robust background in both cloud and on-premise infrastructure, a deep understanding of data privacy regulations, and extensive experience with PCI DSS compliance and other security frameworks. As a player-coach, the Sr Manager of Information Security will be both a hands-on contributor and a strategic leader, capable of designing, implementing, and managing comprehensive security measures while leading and developing a team of security professionals.
What you will accomplish:
You will develop and execute a comprehensive information security strategy aligned with business objectives, regulatory requirements, and risk profiles
You will ensure compliance with relevant data privacy regulations, including PCI DSS, Philippines/Malaysia’s DPAs, CCPA, and others as needed
You will maintain and ensure compliance with the company’s information security management system
You will lead the design, implementation, and maintenance of secure cloud-based and on-premise infrastructure spanning our product and corporate environments
You will work closely with internal stakeholders across various departments to ensure alignment on security practices and initiatives.
You will grow and manage a team of information security professionals
You will participate in production support and data breach incidents and drills
You will stay current with emerging security threats, vulnerabilities, and technologies, and proactively adjust security measures as necessary.
One year deliverables:
Readiness for PCI DSS Level I audit
Compliance with CCPA and the Data Privacy Acts of the Philippines and Malaysia
Role-based access control
Solution for workstation management and BYOD at scale
About you:
You have between 8 and 10 years of IT experience with five or more years leading a team
You have experience implementing and managing the following services:
Information security management frameworks (PCI DSS, ISO 27001, SOC 2, etc.)
Data privacy frameworks (GDPR, CCPA, etc.)
Identity management systems and role-based access control
Workstation and BYOD management applications
Security best practices for hybrid (cloud+on-premise) product and corporate infrastructure
You enjoy being a hands-on contributor, an influencer, and a leader, in equal measure
You have strong prioritization and project management skills
You are resourceful and are comfortable working independently in ambiguous situations
You are willing to work in-office 5 days a week, starting at 3am PHT Tuesday-Saturday to align with US hours
Bonus points:
You have completed green-field security framework implementations at startups or other small-to-midsize companies
You have experience with scripting and APIs
You have a practical, business-oriented approach to security practices
You are open and willing to take on additional responsibilities that may be outside of this role. We are a growing company!
If you do not meet all the requirements listed above which candidates rarely do, don't worry. We still encourage you to apply!
Tarro is committed to hiring the best team to empower small businesses to thrive. We believe that a diverse workforce is paramount to our success. We welcome talent from all backgrounds - including but not limited to - race, sexual orientation, gender identity, age, nationality, religion, veteran status, political affiliation, and disability.