Security Compliance Engineer

<h3>Accountabilities:</h3><li>Contribute to security audits and certification processes, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and PCI DSS, providing technical expertise and implementation support.</li><li>Translate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable.</li><li>Collaborate with Engineering and DevOps teams to implement, maintain, and validate cloud security controls across AWS and GCP environments.</li><li>Develop and maintain internal security tools using Python to automate security processes, improve operational efficiency, and strengthen technical safeguards.</li><li>Support the implementation and continuous improvement of cloud security measures, including web application firewalls, threat detection, security monitoring, and cloud security posture management.</li><li>Help ensure that technical configurations, security processes, and supporting evidence meet applicable audit requirements and industry standards.</li><li>Contribute to privacy-focused initiatives by helping integrate data protection principles and privacy requirements into technical systems and operational workflows.</li><li>Support security risk management activities, including vendor risk assessments and third-party security reviews where required.</li><li>Work cross-functionally to identify control gaps, recommend remediation measures, and promote security and compliance best practices throughout the organization.</li><li>Stay informed about emerging technologies, cloud security developments, and evolving regulatory requirements relevant to payments and financial technology.</li><h2>Requirements:</h2><li>Practical experience supporting ISO audits and translating compliance requirements into effective technical implementations.</li><li>Previous experience in fintech, payments, financial services, or another highly regulated environment.</li><li>Familiarity with SOC 2 and/or PCI DSS frameworks, particularly their technical implementation and application to engineering environments.</li><li>Understanding of information security, privacy principles, data protection requirements, and relevant compliance frameworks.</li><li>Working knowledge of Python, with the ability to develop, maintain, and improve scripts or lightweight security tools.</li><li>Solid knowledge of AWS and/or GCP security services, including capabilities such as web application firewalls, threat detection, security monitoring, and security posture management.</li><li>Strong collaboration and communication skills, with the ability to work effectively with technical teams and translate compliance requirements into practical engineering solutions.</li><li>Fluency in English, both written and spoken, to support collaboration across distributed teams and international stakeholders.</li><li>Familiarity with Kubernetes and container security is an advantage.</li><li>Experience with infrastructure as code tools, such as Terraform or CloudFormation, is desirable.</li><li>Knowledge of vendor risk management processes and third-party security assessments is a plus.</li><li>Familiarity with modern architectures, including serverless applications, event-driven systems, and AI integrations, is beneficial.</li><li>A proactive, detail-oriented approach to problem-solving, with a strong sense of ownership and a commitment to maintaining robust security and compliance standards.</li><h2>Benefits:</h2><li>Competitive compensation package.</li><li>Fully remote working arrangements, offering flexibility in where you work, subject to the role's location and employment requirements.</li><li>One-time home office allowance to help you establish a comfortable and productive remote workspace.</li><li>Work equipment provided to support your day-to-day responsibilities.</li><li>Stock options, providing an opportunity to participate in the company's long-term growth.</li><li>Health plan coverage, with arrangements available for employees in different locations.</li><li>Flexible days off to support work-life balance and personal well-being.</li><li>The opportunity to work on security and compliance challenges within a global payments technology environment.</li><li>Exposure to modern cloud infrastructure, security automation, privacy engineering, and internationally recognized compliance frameworks.</li><li>The opportunity to collaborate with cross-functional teams and contribute directly to the security and reliability of critical payment systems.</li>