Job Description

Job Description

Job Description

About Toku

Every company in the world runs payroll. But the rails underneath it haven’t changed since the 1970s.

Toku is building what comes next - infrastructure that makes payroll work the way the internet does: instantly, globally, and without unnecessary friction.

️‍

We enable companies to pay teams in stablecoins, fiat, or tokens - without switching systems, retraining staff, or giving up compliance. With one API, Toku connects into platforms like ADP, Gusto, or Workday, and upgrades the back end to move money in seconds instead of days.

We're building the future of payroll and we're just getting started.

To learn more, check our website.

As Toku’s Compliance and Privacy Officer, you’ll lead privacy and security programs, ensuring adherence to regulatory standards like GDPR, SOC2, and ISO 27001. This pivotal role combines technical expertise and strategic project management to ensure regulatory adherence and data protection, shaping the future of compliance in the evolving crypto industry.

• Oversee Privacy and Compliance Frameworks:
• Oversee GDPR compliance practices and drive certification efforts with TrustArc/eTrust, a leading privacy compliance governance certifier. 
• Design and execute privacy and security programs and risk registers aligned with regulatory frameworks (e.g., SOC2, GDPR, ISO 27001).
• Lead security and privacy program initiatives collaboratively across teams.
• Act as a point of contact for privacy-related inquiries and audits.

• Manage Security Protocols:
• Develop and implement security protocols to ensure data integrity and protection.
• Conduct system security audits and drive penetration testing.
• Define access control measures, encryption standards, and secure data transfer protocols.

• Technical Leadership:
• Lead vulnerability assessments and remediation strategies.
• Collaborate with engineering teams to integrate privacy-by-design and security-by-design principles.

• Develop Training Programs:
• Establish company-wide privacy and security training initiatives.
• Stay current with evolving regulations and security threats, adapting strategies accordingly.

• Bachelor’s or Master’s degree. 
• 4-8 years of experience driving security/privacy engineering, business practices, and programs in a fintech SaaS or HRIS/payroll platform.
• Proven track record managing GDPR, SOC2, or ISO 27001 implementations.
• Strong understanding of encryption, authentication, and network security.
• Familiarity with compliance management platforms like TrustArc or Drata.
• Excellent written and verbal communication skills with the ability to simplify complex ideas for diverse audiences.

• Certified Information Systems Security Professional (CISSP).
• Certified Information Privacy Professional (CIPP/E, CIPP/US)ISO 27001.
• Lead Implementer certification.

• Shape the future of the crypto compliance space during a pivotal regulatory moment.
• Work alongside innovative clients and highly engaged industry-leading investors.
• Join a fast-growing startup with a clear market need and a strong product-market fit.
• Competitive salary, equity, and remote-friendly work culture.

Toku is an equal opportunity employer, and we are committed to being a diverse team that reflects a broad range of background, thought, and experience. We do not discriminate based on race, color, religion, sex, gender identity, sexual orientation, age, national origin, status as an individual with a disability, status as protected veteran, or any other legally protected characteristics. Women, minorities, LGBTQ+, and people from underrepresented backgrounds are strongly encouraged to apply.

We strongly encourage you use Rezi.ai to vet resume quality before applying.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Tags

Similar Jobs