Security Compliance Engineer

Feedzai; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

A leading technology firm in Toronto seeks a Compliance and Security Specialist to secure their RiskOps platform. This role involves ensuring compliance with standards like PCI DSS and GDPR, maintaining security controls, and conducting risk analysis. The ideal candidate has expertise in compliance frameworks, cloud security, and excellent communication skills. The firm fosters a dynamic work environment committed to making a difference in financial fraud prevention.

Qualifications

• Solid knowledge of compliance and regulatory frameworks including PCI DSS, ISO/IEC 27001, SOC 2, NIST, CIS, GDPR.
• Understanding of cloud security concepts and experience integrating security controls.
• Excellent written and verbal communication skills.

Responsibilities

• Ensure compliance with industry standards and regulations.
• Maintain the security control framework and implement continuous monitoring.
• Conduct risk analysis and support audit processes.

Skills

Knowledge of compliance frameworks

Cloud security concepts

Excellent communication skills

Tools

Kubernetes

Generative AI tools

Job description

As a Compliance and Security Specialist at Feedzai, you will play a crucial role in maintaining the security and integrity of our cutting-edge RiskOps platform. You'll collaborate with a team of subject matter experts to design, develop, and maintain automated solutions that ensure continuous compliance with a wide range of industry regulations and requirements. Your work will directly contribute to safeguarding global commerce and enabling digital trust in every transaction.

Your Responsibilities:

• Ensure compliance with core standards and regulations such as PCI DSS, ISO/IEC 27001, SOC 2, NIST, CIS, and GDPR, and actively participate in audit processes.
• Maintain Feedzai’s security control framework and implement continuous control monitoring.
• Conduct risk analysis and provide prioritized remediation recommendations.
• Assist in the development, maintenance, and revision of security policies, processes, standards, and procedures.
• Design, develop, and maintain automated solutions to support our continuous compliance program.
• Support client, vendor, and regulatory audits, including reviewing questionnaires and agreements.
• Support company-wide security and data privacy training initiatives.

What You Bring to the Table:

• Solid knowledge of compliance and regulatory frameworks (PCI DSS, ISO/IEC 27001, SOC 2, NIST, CIS, GDPR, etc.).
• Understanding of cloud security concepts (e.g., AWS IAM, GCP or Azure security principles) and experience integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques.
• Excellent communication skills (both written and verbal) with the ability to articulate complex topics clearly and concisely.

Nice to Have:

• Knowledge of container orchestration systems such as Kubernetes.
• Experience working with Generative AI (GenAI) tools.

Feedzai is committed to your success. In your first 30 days, you'll participate in comprehensive training, connect with colleagues, and receive dedicated one-on-one time with your manager. You'll quickly become immersed in our brand and begin contributing to ongoing projects. We offer a dynamic and inclusive work environment where your passion for fighting financial fraud and crime can make a real difference.

Feedzai is an Equal Opportunity Employer. We value diversity and do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

How to Apply

Interested in this position? Please submit your resume and cover letter through the application portal.