Director, Security Assurance and Compliance

• Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.
• Most compliance organizations prove their controls by assembling evidence by hand, once per framework, every year.
• We are an organization of the future: common controls tested once in code, monitored continuously, and reused across frameworks (including PCI, SOC, SOX, and ISO).
• You will lead that build for a payments and lending platform where regulatory frameworks have real teeth.
• This role represents a strategic shift toward engineered, proactive compliance where trust is continuously measured rather than only periodically asserted in documents.
• Operating as an independent second line of defense, you will balance rigorous assurance with engineering pragmatism, maintaining the autonomy to assess internal teams while helping them scale through automation.
• The position spans both internal transformation and external accountability. Internally, you will drive continuous controls monitoring and risk governance; externally, you will own the evidence base that powers our customer trust surface and sales enablement efforts.

A day in the life

(Responsibilities)

• Drive Engineered Compliance: Build and own continuous controls monitoring, automated evidence collection, and compliance-as-code initiatives so controls are tested once and reused seamlessly across multiple frameworks and certifications.
• Lead Enterprise Risk & Continuity Governance: Manage overall organizational security risk, third-party and vendor risk, alongside business continuity and disaster recovery governance.
• Own the Assurance Evidence Base: Maintain and safeguard the independent evidence base underlying our Trust Center and customer security reviews, ensuring absolute integrity while partnering with Customer Trust teams on delivery.
• Serve as Second Line of Defense: Act as an independent reviewer with the standing and authority to challenge engineering and operational teams, ensuring objective assessment across all security domains.
• Evolve Team Capabilities: Mentor and upskill the security compliance organization, driving a successful cultural and technical transition from manual auditing to automated compliance engineering.

What you'll need to thrive (Requirements)

• Proven Transformation Leadership: Experience leading a security assurance or risk transformation program rather than solely maintaining a steady-state compliance function.
• Deep Framework Expertise: Strong technical command of major regulatory and security frameworks including PCI, SOC, SOX, and ISO.
• Hands-on Automation Track Record: Demonstrated success implementing automated controls and continuous evidence collection while upskilling existing team members through the shift.
• Technical & Pragmatic Mindset: Ability to balance regulatory rigor with engineering constraints, holding your own in deep technical conversations with engineers.
• People Management Experience: Proven track record leading a team of security, risk, or compliance professionals.

What will help you stand out (Nonessential Skills/Nice to Haves)

• Background in payments, fintech, or another highly regulated platform business.
• Direct experience operating within a two-lines-of-defense governance structure.
• Experience scaling automated compliance architecture within fast-growing cloud environments.

AI at Toast

• At Toast, one of our company values is that we're hungry to build and learn.
• We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality.
• We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them.
• The people who thrive here are those who embrace changes that let us build more for our customers; it's a core part of our culture.

Our Total Rewards Philosophy

• We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry.
• Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters' changing needs.
• Learn more about our benefits at https://careers.toasttab.com/toast-benefits .
• The base salary range for this role is listed below.
• The starting salary will be determined based on skills, experience, and geographic location.
• In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits.
• You can learn more about how we align pay with local labor markets in our Geographic Pay Zone Philosophy .

Zone A

$204,000 — $326,000 USD

Zone B

$177,000 — $283,000 USD

Zone C

$159,000 — $254,000 USD

• How Toast Uses AI in its Hiring Process
• Throughout the hiring process, our goal is to get to know you.
• We use AI tools to support our recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure they can be fully focused on your conversation.
• All hiring decisions are made by people.
• We ask that you complete interviews and assessments on your own, without real-time AI tools, recording, or transcription bots, unless we tell you otherwise in advance.

Our Approach to Hybrid Working

• We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs.
• Our goal is to build a strong culture of connection as we work together to empower the hospitality community, regardless of location.
• Please visit the Locations page on our career site to learn more about our in-office expectations by region: https://careers.toasttab.com/locations-toast
• People Are the Secret Ingredient in Our Recipe for Success
• At Toast, our employees are our secret ingredient—when they thrive, we thrive.
• The restaurant industry brings together people with a wide range of backgrounds, experiences, and perspectives, and we value that same breadth at Toast.
• We strive to build a culture grounded in authenticity, respect, and humility, where every Toaster has a real opportunity to grow, contribute, and do their best work—raising the bar in delivering exceptional experiences for our customers and each other.

Apply today!

• Toast is committed to creating an accessible and inclusive hiring process.
• As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process.
• If you need an accommodation to access the job application or interview process, please contact [email protected] .

------

For roles in the United States, it is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.