Lead Technical Governance Analyst at Toast

What you'll do

• Design and drive the foundational architecture of the GRC program.
• Own and evolve the Common Controls Framework to consolidate regulatory controls.
• Independently lead complex, cross-functional security programs from concept to maturity.
• Develop governance policies and best practices to enhance corporate IT security posture.
• Champion "Shift Left" strategy by embedding GRC checkpoints into SDLC pipelines.
• Define and standardize processes for assessing GRC impacts during major system changes.

What we're looking for

• 8+ years of experience in Information Security GRC, Audit, or Technical Program Management.
• Expertise in designing and operationalizing a Common Controls Framework (CCF) for multiple regulatory frameworks.
• Proven experience as an Administrator or primary owner of modern GRC tools like AuditBoard.
• Ability to define, manage, and enforce governance documentation hierarchy and maintain security baselines.
• Demonstrated capability to lead complex security initiatives and drive cross-functional collaboration without direct authority.
• Strong understanding of cybersecurity controls across cloud, corporate IT, and identity and access management.