Security Control Engineer
Thought Machine5 hours ago
Lisbon, PortugalSenior
Responsibilities
- Design and implement technical and operational capabilities, tools, procedures, and controls that mitigate security, business continuity, and disaster recovery risks.
- Develop automated tools and processes for continuous audits and collection of evidence supporting ISO 27001, ISO 22301, PCI-DSS, and SOC 2 Type 2 certifications.
- Collaborate with software engineering teams to design technical solutions that satisfy product security requirements.
- Respond to client security queries and create technically accurate materials for clients and auditors.
- Maintain and continuously improve the ISMS, BCMS, security standards, controls, and business continuity plans as threats, standards, and technology evolve.
Requirements
- Experience designing and implementing security controls in cloud infrastructure such as AWS or GCP.
- Experience working directly with software engineering teams to design technical solutions that meet security requirements.
- Experience automating controls through code, such as Python or Go.
- Strong technical background in distributed systems, cloud security, and related technologies.
- Knowledge of threat modelling for assessing threat probabilities and frequency.
- Excellent communication skills and the ability to translate technical security concepts into business-relevant insights.
- Ability to collaborate with internal departments and external stakeholders.
- Experience in a fast-paced technology environment or fintech is desirable.
- Knowledge of container security, Kubernetes, and Kafka is desirable.
- Experience obtaining or maintaining security certifications such as SOC 2, ISO 27001, or PCI-DSS is desirable.
- Experience leading security risk assessments and preferably knowledge of the FAIR framework is desirable.
Benefits
- Full-time, permanent position based in Lisbon with four days per week onsite.
- Voluntary pension plan with matching contributions up to 5%.
- Private healthcare and comprehensive life insurance.
- 25 days of holiday plus public holidays.
- Two charity days per year and a daily meal allowance.
- Access to learning materials, courses, sports and hobby clubs, and required technology.
- Salary is described as highly competitive, with no specific amount stated.
Categories
About Thought Machine
Thought Machine builds cloud-native core and payments platforms for banks, centered on Vault Core, a microservices, API-driven core banking system delivered in the cloud. It sells enterprise software and services to banks and financial institutions, with engineers embedding to implement and integrate systems. Founded in 2014 and headquartered in London, the privately held company serves global banking markets and focuses on replacing legacy core infrastructure.