1 month ago
London, United KingdomSenior
Responsibilities
- Design, implement, and maintain technical and operational controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements.
- Ensure security controls are enforced across AWS, Kubernetes, and application layers.
- Translate regulatory requirements into concrete security mechanisms and partner with Legal, Compliance, Risk, and Engineering.
- Own audit preparation, evidence collection, auditor walkthroughs, remediation tracking, and audit outcomes.
- Build automated evidence pipelines and continuously validate access reviews, logging coverage, and configuration drift.
- Embed logging, access controls, encryption, monitoring, and change management into secure-by-default platform designs.
Requirements
- 6+ years of experience in security engineering, cloud security, or compliance-focused security roles.
- Hands-on operational experience implementing DORA in a production or regulated environment, including areas such as ICT risk management, incident classification and reporting, third-party oversight, and digital operational resilience testing.
- Experience supporting SOC 2 and/or ISO 27001 audits and translating regulatory requirements into technical controls.
- Strong working knowledge of AWS security fundamentals, including IAM, logging, encryption, and networking.
- Experience building or automating security and compliance processes with Python, Bash, Go, or similar tools.
- Experience securing Kubernetes environments, familiarity with AppSec tooling such as SAST, DAST, and manual testing, and experience with AWS security services such as GuardDuty, Config, and Security Hub are preferred.
- Experience in fintech, payments, or regulated infrastructure; relevant security or compliance certifications; and familiarity with EU financial regulators are advantageous.
Benefits
- Competitive salary and benefits package.
- Equity in a rapidly growing company.
- Opportunity to work on global financial infrastructure in a fast-paced fintech startup.
- Collaborative work culture emphasizing personal and professional growth.
- Role based in Amsterdam, Netherlands (EU/EEA).
Tech Stack
Categories
