About the Team You'll JoinThe Security Division at Toss Bank comprises the Security Policy Team, Privacy Protection Team, System Security Team, Network Security Team, Security Red Team, Security Blue Team, IT Service Team, and Security Audit Team.As an Information Security Manager within Toss Bank's Security Division, you will be responsible for ensuring that established security policies and standards are effectively implemented and monitored in real-world scenarios, and you will be part of the Security Policy Team.The Security Division collaborates with various teams to create a safe and trustworthy service. The Security Policy Team works closely with product organizations to establish secure services from a security strategy, certification, and policy management perspective, while also collaborating with Legal & Compliance, Platform Engineering, and Internal Audit for regulatory compliance and internal controls. This collaborative effort enhances teamwork towards common goals.Toss Bank's Security Division is dedicated to providing secure electronic financial transaction services and strives to embed security into user operations to ensure a consistently safe working environment. What You'll Be DoingEstablishing and managing security review and compliance criteria, and conducting assessments.Performing checks on critical information communication infrastructure, electronic financial infrastructure management systems, and cloud management frameworks.Preparing for and responding to information security certifications (such as PCI-DSS, ISO27001, ISMS-P).Verifying and checking security requirements when collaborating with external partners and organizations.Defining security architecture and requirements when implementing new IT technologies.Designing and standardizing the enterprise information security framework. Who We Would Like to Join UsA background in development security is a plus.An interest and understanding of security threats and the latest IT environments is desirable.For senior-level candidates, we need individuals who understand security requirements related to financial information protection compliance (laws, guidelines, etc.).Knowledge of new technologies such as MSA, K8S, and Cloud is essential.Understanding of financial IT systems and service architectures is necessary.High proficiency in information security architecture and security solutions is required.Capability to review network separation architecture and cloud service architecture suitable for the financial sector is needed.For junior-level candidates, an understanding of IT infrastructure (servers, networks, DBMS, endpoints, etc.) is necessary.Experience in preparing for and responding to information security certifications (such as PCI-DSS, ISO27001, ISMS-P) is critical.Experience in checking management systems for critical information communication infrastructures and electronic financial infrastructures is required.Ability to conduct checks according to security review criteria and provide guidance on improvements for identified deficiencies is essential. How to Craft Your ResumeProvide specific examples of your work experience.Share concrete examples of experience in management system checks, security reviews, or security architecture design and review in the relevant field.Include accomplishments or improvements achieved while performing security check and review tasks.Given the need for collaboration across various teams, highlight any experience in resolving complex problems with diverse organizations. Your Journey to Join Toss Bank
Mar 9, 2026
