Security Control Engineer
Thought Machine5 hours ago
Lisbon, PortugalSenior
Responsibilities
- Design and implement technical and operational capabilities, tools, and procedures addressing security, business continuity, and disaster recovery risks.
- Develop continuous audit and control-assurance processes and obtain evidence for ISO 27001, ISO 22301, PCI-DSS, and SOC 2 Type 2 certifications.
- Work with software engineering teams to design technical solutions that satisfy product security requirements.
- Respond to client security queries and create accurate, detailed materials for client and auditor presentations.
- Maintain and improve the organisation’s ISMS, BCMS, security standards, controls, and business continuity plans as threats, standards, and technologies evolve.
Requirements
- Experience designing and implementing security controls in cloud-based infrastructure such as AWS or GCP.
- Experience working directly with software engineering teams on technical security solutions.
- Experience automating security controls through code, such as Python or Go.
- Strong technical background in distributed systems, cloud security, and related technologies.
- Knowledge of threat modeling for assessing threat probability and frequency.
- Excellent communication skills and ability to translate technical security concepts into business-relevant insights.
- Ability to collaborate with internal departments and external stakeholders.
- Experience in a fast-paced technology environment or fintech is desirable.
- Knowledge of container security, Kubernetes, Kafka, and emerging technologies is desirable.
- Experience obtaining or maintaining security certifications such as SOC 2, ISO 27001, or PCI-DSS is desirable.
- Experience leading security risk assessments and knowledge of the FAIR framework are desirable.
Benefits
- Full-time permanent position based in the Lisbon office with four days per week onsite.
- Voluntary pension plan with matching contributions up to 5%.
- Private healthcare and comprehensive life insurance.
- 25 days of holiday plus public holidays.
- Two charity days per year.
- Daily meal allowance.
- Access to learning materials and courses.
- Subsidised sports and hobby clubs.
- Latest technology equipment and workplace snacks, smoothies, and drinks.
Categories
About Thought Machine
Thought Machine builds cloud-native core and payments platforms for banks, centered on Vault Core, a microservices, API-driven core banking system delivered in the cloud. It sells enterprise software and services to banks and financial institutions, with engineers embedding to implement and integrate systems. Founded in 2014 and headquartered in London, the privately held company serves global banking markets and focuses on replacing legacy core infrastructure.