Senior Compliance Security Engineer — FinTech (EU, DORA/GDPR)

Castle Island; Amsterdam; Hybrid; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Equity

Startup atmosphere

Impactful work

Professional growth

Job summary

OpenFX, based in Amsterdam, is seeking a Security & Compliance Engineer to turn regulatory requirements into running controls and prove them to auditors. This senior role operates in a heavily regulated EU environment and requires hands-on experience implementing DORA, GDPR, SOC 2, and ISO 27001.

You will own end-to-end security controls, partner with Legal, Compliance, and Risk, and ensure controls are enforced across AWS, Kubernetes, and application layers.

Qualifications

• 6+ years in security engineering, cloud security, or compliance-oriented roles.
• Hands-on experience implementing DORA in a production/regulatory environment.
• Experience supporting SOC 2 and/or ISO 27001 audits.
• Ability to translate regulatory requirements into technical controls.
• Strong knowledge of AWS security fundamentals (IAM, logging, encryption, networking).
• Comfortable leading auditor interactions and explaining systems clearly.
• Experience building or automating security/compliance processes (Python, Bash, Go).
• Accountability for audit outcomes.

Responsibilities

• Own audit-ready security controls for regulatory frameworks (DORA, GDPR, SOC 2, ISO 27001).
• Translate regulatory language into concrete security mechanisms and collaborate with Legal/Compliance.
• Run audits: prepare evidence, walkthroughs, remediation tracking, automate pipelines.
• Embed security/compliance into the platform, ensuring logs, access controls, encryption, monitoring meet expectations.
• Automate compliance checks and push controls into code and infrastructure.

Skills

Security Engineering

Cloud Security

DORA compliance

GDPR

SOC 2

ISO 27001

AWS security

Kubernetes

Python

Audit leadership

Tools

AWS GuardDuty

AWS Config

CloudWatch

Job description

OpenFX, based in Amsterdam, is seeking a Security & Compliance Engineer to turn regulatory requirements into running controls and prove them to auditors. This senior role operates in a heavily regulated EU environment and requires hands-on experience implementing DORA, GDPR, SOC 2, and ISO 27001.

You will own end-to-end security controls, partner with Legal, Compliance, and Risk, and ensure controls are enforced across AWS, Kubernetes, and application layers.