Security Compliance Engineer
New
J
JobgetherPayments technology
Based in GermanyFull-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Fluency in English, both written and spoken
- Required Skills
- AWSPython
Requirements
- Have practical experience supporting ISO audits and translating compliance requirements into technical implementations.
- Have experience in fintech, payments, financial services, or another highly regulated environment.
- Be familiar with SOC 2 and/or PCI DSS frameworks, including their technical implementation in engineering environments.
- Understand information security, privacy principles, data protection requirements, and relevant compliance frameworks.
- Have working knowledge of Python and the ability to develop, maintain, and improve scripts or lightweight security tools.
- Have solid knowledge of AWS and/or GCP security services, including web application firewalls, threat detection, security monitoring, and security posture management.
- Be fluent in written and spoken English.
- Kubernetes and container security familiarity is an advantage.
- Experience with infrastructure as code tools such as Terraform or CloudFormation is desirable.
- Knowledge of vendor risk management and third-party security assessments is a plus.
- Familiarity with serverless applications, event-driven systems, and AI integrations is beneficial.
Responsibilities
- Contribute technical expertise and implementation support to security audits and certification processes, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and PCI DSS.
- Translate security, compliance, and privacy requirements into scalable, enforceable, measurable, and auditable technical controls.
- Collaborate with Engineering and DevOps teams to implement, maintain, and validate cloud security controls across AWS and GCP.
- Develop and maintain internal Python security tools to automate processes and strengthen technical safeguards.
- Support cloud security measures, including web application firewalls, threat detection, security monitoring, and cloud security posture management.
- Help ensure technical configurations, security processes, and supporting evidence meet audit requirements and industry standards.
- Integrate data protection principles and privacy requirements into technical systems and operational workflows.
- Support security risk management, vendor risk assessments, and third-party security reviews.
- Identify control gaps, recommend remediation measures, and promote security and compliance best practices across the organization.
View Full Description & ApplyYou'll be redirected to the employer's site
