Skip to content
Tarro

Sr Manager, Information Security and Compliance

Dumaguete; Kuala Lumpur; ManilaOnsite · Malaysia
Manager · FullTime · IT Operations
POSTED 10 APR 2025VERIFIED 1D AGO
Apply Ask
Role
578 days opentrue age
Posted 10 Apr 2025
CompanyTarro →
37open roles
Opened · 30d
+0
Closed · 30d
−0
30d window
Market
614open · Manager Security
Opened · 7d
+539% of open
All security
8,274open
All tracked boards · live 9 Nov · n=614

About us

Here at Tarro we build products that empower small brick and mortar restaurants by liberating them of the operational burden of running their business. We accomplish this by providing a frictionless connection between them and their customers through our multi-product ecosystem offering AI-enabled order taking, delivery enablement, payment solutions, and point-of-sale software. At Tarro, we use a combination of bits (technology) and atoms (people) to solve real world problems facing small business owners.

We obsess over placing our customers first and working backwards from there. When our customers succeed, we succeed. The restaurant industry in the US is over a $1 trillion total addressable market (TAM), but remains relatively underserved by technology. Large chains are able to afford expensive tech that gives them a huge advantage; we believe that small restaurant owners deserve access to the same technologies at an affordable price.

Tarro has been profitable for nearly a decade and has seen 5x revenue growth in the past four years. As of our last fundraising round in mid-2022, we were valued at $450M and have since seen substantial growth across customer acquisition, product development, and company headcount. Thousands of loyal restaurants have entrusted Tarro with their success, and together we have supported nearly 20 million customers. We are proud to be named one of Built In’s top companies to work for in 2023.

To learn more about our culture, values and how you can be a part of helping mom & pop restaurants thrive, please visit us here! Helping restaurants thrive, not just survive.

What we’re looking for

We are seeking a highly skilled and experienced Sr Manager of Information Security and Compliance to lead our organization’s information security strategy and operations. The ideal candidate will have a robust background in both cloud and on-premise infrastructure, a deep understanding of data privacy regulations, and extensive experience with PCI DSS compliance and other security frameworks. As a player-coach, the Sr Manager of Information Security will be both a hands-on contributor and a strategic leader, capable of designing, implementing, and managing comprehensive security measures while leading and developing a team of security professionals.

What you will accomplish

You will develop and execute a comprehensive information security strategy aligned with business objectives, regulatory requirements, and risk profiles

You will ensure compliance with relevant data privacy regulations, including PCI DSS, Philippines/Malaysia’s DPAs, CCPA, and others as needed

You will maintain and ensure compliance with the company’s information security management system

You will lead the design, implementation, and maintenance of secure cloud-based and on-premise infrastructure spanning our product and corporate environments

You will work closely with internal stakeholders across various departments to ensure alignment on security practices and initiatives.

You will grow and manage a team of information security professionals

You will participate in production support and data breach incidents and drills

You will stay current with emerging security threats, vulnerabilities, and technologies, and proactively adjust security measures as necessary.

One year deliverables

Readiness for PCI DSS Level I audit

Compliance with CCPA and the Data Privacy Acts of the Philippines and Malaysia

Role-based access control

Solution for workstation management and BYOD at scale

About you

You have between 8 and 10 years of IT experience with five or more years leading a team

You have experience implementing and managing the following services:

Information security management frameworks (PCI DSS, ISO 27001, SOC 2, etc.)

Data privacy frameworks (GDPR, CCPA, etc.)

Identity management systems and role-based access control

Workstation and BYOD management applications

Security best practices for hybrid (cloud+on-premise) product and corporate infrastructure

You enjoy being a hands-on contributor, an influencer, and a leader, in equal measure

Source · TarroFirst seen 7 NovOriginal ↗