Join Our Team! The Security Division at Toss Bank comprises multiple teams, including the Security Policy Team, Privacy Protection Team, System Security Team, Network Security Team, Security Red Team, Security Blue Team, IT Service Team, and Security Audit Team, all working collaboratively. The Privacy Operations Specialist will play a crucial role within the Privacy Protection Team, focusing on safeguarding personal and credit information. This division collaborates with various teams to create secure and reliable Toss Bank services. The Privacy Protection Team specifically works with product organizations for data protection and collaborates with Legal & Compliance, Platform Engineering, and Internal Audit to ensure regulatory compliance and internal controls. The Security Division is committed to providing secure electronic financial transaction services, ensuring a safe working environment for users. Your Responsibilities: Engage in the establishment and operation of privacy policies and participate in obtaining and maintaining domestic and international security certifications (ISMS-P, ISO/IEC 27001, 27701). Identify and manage the status of personal data processing based on contracts, agreements, databases, and APIs. Conduct inspections of third-party service providers and respond to external organization audits, ensuring follow-up actions are taken. Regularly monitor the handling of personal credit information monthly, quarterly, and biannually. Ideal Candidate: We are looking for someone with a fundamental understanding and interest in personal and credit information protection regulations, eager to develop related competencies. Prior experience in an information security or privacy protection role is advantageous. Familiarity with domestic and international information security certification standards such as ISMS-P, ISO/IEC 27001, 27701 is preferred. Experience working in organizations related to personal data or information security, or a degree in Computer Science or Information Security is a plus. A keen interest in risk management associated with personal credit information from both policy and technical perspectives (e.g., databases, APIs) is desirable. Enjoyment of collaborative problem-solving across various teams is essential. Resume Guidelines: If you have experience or education related to privacy protection, please detail your specific roles, learnings, and accomplishments. Share instances where you proactively identified and improved issues in personal information protection tasks. Clearly outline the competencies you wish to develop in the field of privacy protection and your career aspirations. Application Process: Application submission > Job interview > Cultural fit interview > Reference check (if applicable) > Compensation negotiation > Final offer and onboarding. Important Notes: This is a contract position, with an initial term of one year. Entry-level candidates are welcome to apply! Any discrepancies or disciplinary issues found in submitted documents may result in cancellation of the hiring process. Applicants who meet disqualification criteria as per Toss Bank's recruitment regulations may have their applications canceled. Candidates with disabilities or who are veterans will receive preferential treatment as per applicable laws.
Mar 9, 2026