Security Compliance Engineer

Jobgether SRL; Portugal; On-site; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Fully remote work

Home office allowance

Work equipment provided

Stock options

Health plan coverage

Flexible days off

Job summary

Jobgether SRL is seeking a Security Compliance Engineer based in Portugal to strengthen security, privacy, and regulatory compliance across a global payments technology environment. You will translate standards into measurable technical controls and collaborate with Security, Engineering, and DevOps teams to secure AWS and GCP infrastructure.

You will develop Python-based security tools and support audits like ISO, SOC 2, and PCI DSS, while helping manage vendor risk and privacy initiatives in a

Qualifications

• Experience supporting ISO audits and translating compliance into technical implementations.
• Experience in fintech or regulated environments.
• Familiarity with SOC 2 and PCI DSS frameworks and their technical implementations.
• Understanding of information security, privacy, data protection, and relevant compliance frameworks.
• Proficiency in Python to develop security tools and automate processes.
• Knowledge of AWS and/or GCP security services including WAFs, threat detection, monitoring, and posture management.
• Strong collaboration and communication with engineering teams to translate requirements into engineering solutions.
• Fluent English, written and spoken.
• Familiarity with Kubernetes and container security is a plus.
• Experience with infrastructure as code tools like Terraform or CloudFormation is desirable.
• Knowledge of vendor risk management and third‑party security assessments is a plus.
• Understanding modern architectures (serverless, event-driven, AI integrations) is beneficial.
• Proactive, detail-oriented problem-solving with ownership for robust security and compliance.

Responsibilities

• Support security audits and certifications (ISO 27001/27701/42001, SOC 2, PCI DSS) with technical input.
• Translate requirements into scalable, auditable controls across environments.
• Collaborate with Engineering and DevOps to implement and validate cloud security controls in AWS and GCP.
• Develop internal security tools in Python to automate processes and improve efficiency.
• Maintain and improve cloud security measures (WAFs, threat detection, monitoring, CSPM).
• Ensure configurations and evidence meet audit requirements and industry standards.
• Contribute to privacy initiatives by integrating data protection principles into systems.
• Assist with vendor risk assessments and third-party reviews.
• Identify control gaps and propose remediation across organization.
• Stay updated on cloud security developments and regulatory changes.

Skills

Security compliance

Cloud security

Python scripting

Stakeholder collaboration

Documentation and reporting

Tools

AWS

GCP

Terraform

Kubernetes

CloudFormation

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Compliance Engineer based in Portugal.

As a Security Compliance Engineer, you will play a key role in strengthening security, privacy, and regulatory compliance across a global payments technology environment. You will translate industry standards and regulatory requirements into practical, measurable, and auditable technical controls. Working closely with Security, Engineering, and DevOps teams, you will help secure cloud infrastructure across AWS and GCP while supporting international audit and certification processes. You will also develop Python-based security tools and contribute to initiatives that improve risk management and operational resilience. This role offers the opportunity to combine hands-on engineering with security governance in a fast-paced, highly regulated industry. Your work will directly support the protection of sensitive data, the reliability of payment infrastructure, and the trust of customers and partners worldwide.

Accountabilities

• Contribute to security audits and certification processes, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and PCI DSS, providing technical expertise and implementation support.
• Translate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable.
• Collaborate with Engineering and DevOps teams to implement, maintain, and validate cloud security controls across AWS and GCP environments.
• Develop and maintain internal security tools using Python to automate security processes, improve operational efficiency, and strengthen technical safeguards.
• Support the implementation and continuous improvement of cloud security measures, including web application firewalls, threat detection, security monitoring, and cloud security posture management.
• Help ensure that technical configurations, security processes, and supporting evidence meet applicable audit requirements and industry standards.
• Contribute to privacy-focused initiatives by helping integrate data protection principles and privacy requirements into technical systems and operational workflows.
• Support security risk management activities, including vendor risk assessments and third-party security reviews where required.
• Work cross-functionally to identify control gaps, recommend remediation measures, and promote security and compliance best practices throughout the organization.
• Stay informed about emerging technologies, cloud security developments, and evolving regulatory requirements relevant to payments and financial technology.

Requirements

• Practical experience supporting ISO audits and translating compliance requirements into effective technical implementations.
• Previous experience in fintech, payments, financial services, or another highly regulated environment.
• Familiarity with SOC 2 and/or PCI DSS frameworks, particularly their technical implementation and application to engineering environments.
• Understanding of information security, privacy principles, data protection requirements, and relevant compliance frameworks.
• Working knowledge of Python, with the ability to develop, maintain, and improve scripts or lightweight security tools.
• Solid knowledge of AWS and/or GCP security services, including capabilities such as web application firewalls, threat detection, security monitoring, and security posture management.
• Strong collaboration and communication skills, with the ability to work effectively with technical teams and translate compliance requirements into practical engineering solutions.
• Fluency in English, both written and spoken, to support collaboration across distributed teams and international stakeholders.
• Familiarity with Kubernetes and container security is an advantage.
• Experience with infrastructure as code tools, such as Terraform or CloudFormation, is desirable.
• Knowledge of vendor risk management processes and third-party security assessments is a plus.
• Familiarity with modern architectures, including serverless applications, event-driven systems, and AI integrations, is beneficial.
• A proactive, detail-oriented approach to problem-solving, with a strong sense of ownership and a commitment to maintaining robust security and compliance standards.

Benefits

• Competitive compensation package.
• Fully remote working arrangements, offering flexibility in where you work, subject to the role's location and employment requirements.
• One-time home office allowance to help you establish a comfortable and productive remote workspace.
• Work equipment provided to support your day-to-day responsibilities.
• Stock options, providing an opportunity to participate in the company's long-term growth.
• Health plan coverage, with arrangements available for employees in different locations.
• Flexible days off to support work-life balance and personal well-being.
• The opportunity to work on security and compliance challenges within a global payments technology environment.
• Exposure to modern cloud infrastructure, security automation, privacy engineering, and internationally recognized compliance frameworks.
• The opportunity to collaborate with cross-functional teams and contribute directly to the security and reliability of critical payment systems.

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.