Remote Security Compliance Engineer | ISO 27001, PCI DSS, SOC 2

Yuno; Mexico; On-site; PHP 7,402,837 - 9,870,449; Full time

Benefits offered by this job

Competitive Compensation

Remote Work – work from anywhere

Home Office Bonus

Work Equipment

Stock Options

Health Plan

Flexible Days Off

Growth courses

Job summary

Yuno is seeking a Security Compliance Engineer to ensure security and privacy programs meet the highest standards. You will contribute to ISO 27001, ISO 27701, SOC 2, and PCI DSS audits, and collaborate with Engineering and DevOps to implement cloud security controls across AWS and GCP.

You will build internal security tooling in Python and drive privacy initiatives that enable secure, compliant operations in the global payments ecosystem.

Qualifications

• ISO 27001 audits and translating controls into technical implementations.
• SOC 2 and PCI DSS familiarity from an engineering perspective.
• Proficiency in Python for developing secure tooling.
• Knowledge of AWS and/or GCP security services.

Responsibilities

• Participate in ISO 27001, ISO 27701, SOC 2, and PCI DSS audits from a technical perspective.
• Translate security, compliance, and privacy requirements into scalable technical controls.
• Design and maintain secure and scalable internal security tooling using Python.
• Work with Engineering and DevOps to implement cloud security controls in AWS and GCP.
• Support privacy initiatives including data mapping and alignment with GDPR and similar.

Skills

Python

AWS/GCP security

ISO 27001

SOC 2

PCI DSS

Privacy frameworks

English fluency

Tools

Kubernetes

CI/CD

Terraform

CloudFormation

Job description

Yuno is seeking a Security Compliance Engineer to ensure security and privacy programs meet the highest standards. You will contribute to ISO 27001, ISO 27701, SOC 2, and PCI DSS audits, and collaborate with Engineering and DevOps to implement cloud security controls across AWS and GCP.

You will build internal security tooling in Python and drive privacy initiatives that enable secure, compliant operations in the global payments ecosystem.