Security Compliance Engineer

Overview

As a Security Compliance Engineer, you will help ensure security and privacy programs meet industry standards by contributing to audits, translating requirements into technical controls, developing security tooling, and implementing cloud security controls.

What you'll do

• Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes from a technical and implementation perspective as part of the Security team.
• Translate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable.
• Develop and maintain internal security tools using Python to support security operations and stronger technical controls.
• Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.

What you'll need

• Practical experience working with ISO audits and translating controls into technical implementations.
• Experience in fintech, payments, or highly regulated environments.
• Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective.
• Understanding of privacy requirements and frameworks.
• Working knowledge of Python, with the ability to build and maintain simple tooling.
• Solid knowledge of AWS and/or GCP security services, including WAF, Guard Duty, Security Hub, and monitoring.
• Strong collaboration skills.
• English fluency.

Nice to have

• Familiarity with Kubernetes or container security.
• Familiarity with infrastructure as code, including Terraform and CloudFormation.
• Experience with vendor risk management and third-party security reviews.
• Familiarity with emerging architectures, such as serverless, event-driven, and AI integrations.

Details

• Location: Spain.
• Remote work.
• Full-time employment.
• Individual contributor role.