Security & Compliance Engineer - Fintech

Edison Smart®; Dubai; On-site; AED 335,000 - 446,000; Full time

Job summary

Edison Smart® is seeking a Security & Compliance Engineer to own security across our fintech platform in the UAE. You will secure a cloud-native Azure environment, drive security across the SDLC, and collaborate with engineers to embed security practices as we scale.

The role demands hands-on security engineering with governance awareness, including PCI-DSS, ISO 27001, and GDPR compliance support, plus familiarity with UAE regulatory requirements. SAMA experience is highly desirable.

Qualifications

• Hands-on security engineering experience in cloud and application security.
• Familiarity with PCI-DSS and ISO 27001 standards.
• Exposure to UAE financial-services regulatory requirements; SAMA desirable.

Responsibilities

• Secure a cloud-native Azure environment and secure code across the SDLC/DevSecOps lifecycle.
• Perform penetration testing and vulnerability assessments; coordinate remediation with developers.
• Lead IAM strategy across Microsoft Entra ID/Azure AD and Okta; manage encryption and key management.
• Implement and monitor security controls; conduct security monitoring and incident response.

Skills

Azure security

Application security

Penetration testing

IAM management

SIEM monitoring

Regulatory knowledge

Tools

Azure AD

Okta

Microsoft Entra ID

Microsoft Sentinel

Splunk

Job description

Security & Compliance Engineer – Fintech

UAE

Early-stage Fintech

AED 30,000-40,000

I’m working with a fast-growing, venture-backed fintech business that is building cloud-native lending technology for banks and financial institutions across the MENA region.

Following recent investment and continued growth, they’re looking for a Security & Compliance Engineer to take ownership of security across their technology platform.

This is not a pure GRC/compliance position. We’re looking for someone who is technically hands-on and comfortable working directly with software engineers, while also understanding the security and regulatory requirements of operating within financial services.

The Role

You’ll work closely with engineering and product teams to embed security throughout the development lifecycle and help build security practices as the organisation scales.

Responsibilities will include:

• Securing a cloud-native Microsoft Azure environment
• Application and API security
• Implementing security throughout the SDLC / DevSecOps lifecycle
• Conducting penetration testing and vulnerability assessments
• Secure code reviews and working directly with developers on remediation
• Vulnerability management and security hardening
• IAM across technologies such as Microsoft Entra ID / Azure AD and Okta
• Security monitoring and incident response
• SIEM technologies including Microsoft Sentinel and/or Splunk
• Encryption, tokenisation, secrets and key management
• Supporting security architecture for APIs and third-party integrations
• Implementing and improving technical security controls
• Supporting compliance with PCI-DSS, ISO 27001 and GDPR
• Supporting requirements associated with financial-services regulators in the UAE and wider GCC

What We're Looking For

Ideally 5–10+ years' experience within Security Engineering, Cloud Security, Application Security or DevSecOps.

You'll ideally bring:

• Strong hands-on Azure security experience
• Application and API security knowledge
• Penetration testing and vulnerability management skills
• Experience working directly with software engineering teams
• Strong understanding of IAM, encryption and key management
• SIEM/security monitoring experience
• Knowledge of PCI-DSS and ISO 27001
• Exposure to UAE financial-services regulatory requirements
• SAMA experience would be highly desirable
• Experience within fintech, payments, digital banking, lending, banking technology or another regulated technology environment

The Environment

This is an early-stage technology company, so we're looking for someone who enjoys building rather than simply maintaining.

You'll need to be comfortable taking ownership, working independently, moving quickly and establishing security practices without relying on a large security team or extensive existing processes.