Security Compliance Engineer

Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team.

Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable.

Develop and maintain internal security tools using Python, supporting security operations and contributing to stronger technical controls.

Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.

Practical experience working with ISO audits and translating controls into technical implementations.

Experience in fintech, payments, or highly regulated environments

Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective.

Understanding of privacy requirements and frameworks.

Working knowledge of Python, with the ability to build and maintain simple tooling.

Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.).

Strong collaboration skills and English fluency.

Familiarity with kubernetes or container security.

Familiarity with infrastructure as Code (Terraform, CloudFormation).

Experience with vendor risk management and third-party security reviews.

Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).

Competitive Compensation.

Remote Work – You can work from everywhere!

Home Office Bonus – A one-time allowance to help you create your ideal home office.

Work Equipment.

Stock Options.

Health Plan wherever you are.

Flexible Days Off.