Audit-Ready Security & Compliance Engineer (Fintech)

OpenFX; Greater London; On-site; GBP 110,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Equity in a growing company

Fast-paced fintech environment

Impact on global financial infra

Collaborative culture and growth

Job summary

OpenFX, a fast-growing fintech in the EU, is hiring a Security & Compliance Engineer to convert regulatory requirements into verifiable production controls and to guide auditors through remediation. Based in Amsterdam, the role collaborates with Legal, Compliance, Risk and Engineering to weave compliance into the platform, with emphasis on DORA, GDPR, SOC 2, ISO 27001 and future regional rules.

You will own end-to-end controls, implement automated evidence pipelines, and ensure logging, access

Qualifications

• Hands-on, security controls implementation in production environments.
• Experience translating regulation into technical controls for audits.
• Strong knowledge of AWS security fundamentals and services.
• Ability to design automated evidence pipelines and auditing workflows.
• Familiarity with DORA, GDPR, SOC 2 and ISO 27001 requirements.

Responsibilities

• Own audit-ready security controls across platforms and IC layers.
• Translate regulatory language into concrete security mechanisms.
• Run audits with evidence collection, walkthroughs and remediation tracking.
• Embed compliance into the platform with secure-by-default designs.
• Automate compliance checks and pipelines to reduce manual effort.

Skills

Security engineering

Cloud security

Compliance security

DORA knowledge

AWS security

Kubernetes security

Tools

GuardDuty

Config

Security Hub

Kubernetes

Python

Go

Bash

Job description

OpenFX, a fast-growing fintech in the EU, is hiring a Security & Compliance Engineer to convert regulatory requirements into verifiable production controls and to guide auditors through remediation. Based in Amsterdam, the role collaborates with Legal, Compliance, Risk and Engineering to weave compliance into the platform, with emphasis on DORA, GDPR, SOC 2, ISO 27001 and future regional rules.

You will own end-to-end controls, implement automated evidence pipelines, and ensure logging, access