Remote Security Compliance Engineer (ISO/SOC2, PCI)

Yuno; Metropolitana; Remote; COP 350,107,000 - 541,074,000; Full time

Benefits offered by this job

Remote work

Home office bonus

Stock options

Health plan

Flexible days off

Work equipment

Job summary

Yuno is building payments infrastructure enabling global operations. We are seeking a Security Compliance Engineer to translate compliance requirements into auditable technical controls, working with Engineering and DevOps to enforce cloud security in AWS and GCP.

You will contribute to ISO audits, SOC 2, and PCI DSS, develop internal security tools in Python, and help ensure privacy programs meet industry standards for a global payments ecosystem.

Qualifications

• Experience with ISO audits and translating controls into technical implementations.
• Experience in fintech, payments, or highly regulated environments.
• Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective.
• Understanding of privacy requirements and frameworks.
• Working knowledge of Python and building simple tooling.
• Cloud security services knowledge (WAF, GuardDuty, Security Hub, monitoring).
• Strong collaboration skills and English fluency.

Responsibilities

• Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes from a technical perspective.
• Translate security, compliance, and privacy requirements into scalable technical controls.
• Develop and maintain internal security tools using Python.
• Collaborate with Engineering and DevOps to implement cloud security controls in AWS and GCP.

Skills

ISO audits and translating controls

Fintech/payments/regulatory experience

SOC 2 & PCI DSS familiarity

Privacy requirements & frameworks

English fluency & collaboration

Vendor risk management

Emerging architectures (serverless, AI

Tools

Python

AWS

GCP

Terraform / CloudFormation

Kubernetes

Job description

Yuno is building payments infrastructure enabling global operations. We are seeking a Security Compliance Engineer to translate compliance requirements into auditable technical controls, working with Engineering and DevOps to enforce cloud security in AWS and GCP.

You will contribute to ISO audits, SOC 2, and PCI DSS, develop internal security tools in Python, and help ensure privacy programs meet industry standards for a global payments ecosystem.