Security Control Engineer

Client Server Limited; Lisboa; Híbrido; EUR 57 000 - 95 000; Tempo integral

Resumo da oferta

Client Server Limited is seeking a Security Control Engineer in Lisbon to design and implement security and business continuity controls across cloud and operational domains. You will work with engineering teams to meet tough security requirements and help manage audits and certifications.

Based in Lisbon with the option to work from home once a week, you will contribute to ISMS/BCMS improvements and client communications, ensuring resilience and secure product delivery.

Qualificações

• Experience designing and implementing security controls in cloud infrastructure (e.g., AWS, GCP).
• Collaborates with software engineering teams to meet security requirements in products.
• Experience with control automation via code (Python, Go).
• Strong technical background in distributed systems and cloud security.

Responsabilidades

• Design and implement security and business continuity controls across technical and operational domains.
• Develop tools and processes for ongoing security audits, control testing and evidence gathering.
• Support maintenance of certifications including ISO 27001, ISO 22301, PCI DSS and SOC 2 Type 2.
• Maintain and evolve ISMS and BCMS; align security with evolving threats and client requirements.

Conhecimentos

Cloud security

Engineering collaboration

Code automation

Distributed systems

Threat modelling

English fluency

Descrição da oferta de emprego

Security Control Engineer Lisbon to €95,000

Would you like to join a forward thinking financial services technology team building the bank of tomorrow, where you'll play a key role in securing modern, web-scale products and protecting customer data?

As a Security Control Engineer, you'll play a key role in designing and implementing security and business continuity controls that protect the organisation and its customers. Working across both technical and operational domains, you'll develop capabilities, tools and processes to manage security and business continuity risks, while contributing to product security, disaster recovery and resilience planning.

A major focus will be continuous control assurance. You'll develop and implement effective tools and processes for ongoing security audits, control testing and evidence gathering, supporting the maintenance and renewal of certifications including ISO 27001, ISO 22301, PCI DSS and SOC 2 Type 2. You'll also design practical controls and capabilities that meet these regulatory and certification requirements.

The role is highly client facing, with responsibility for responding to technical security queries and helping clients understand and gain confidence in the organisation's security posture. You'll create and maintain technically accurate security materials for client presentations, assessments and due diligence.

You'll also help maintain and evolve the organisation's Information Security Management System (ISMS) and Business Continuity Management System (BCMS), ensuring security standards, controls and recovery plans remain aligned with changing threats, technology, standards and client requirements. This will involve staying close to emerging security developments and ensuring changes to processes and the technology landscape are reflected in the organisation's approach to security and resilience.

Location:

You'll be based in the Lisbon office, with flexibility to work from home once a week.

About you:

• You have experience designing and implementing technical solutions to deliver security controls and capabilities in cloud-based infrastructure (e.g. AWS, GCP)
• You have experience of working directly with software engineering teams in designing new technical solutions to meet security requirements in products
• You have experience with control automation via code (e.g. Python, Go)
• You have a strong technical background, with experience in distributed systems, cloud security and related technologies
• You have a good knowledge of threat modelling for the purposes of understanding threat probabilities and frequency
• You're collaborative with fluent English language skills

What's in it for you:

• Salary to €95,000
• Stock options
• Continuous professional training
• Voluntary Pension Plan (match up to 5%)
• Two charity days a year
• Daily Meal Allowance
• Subsidised sports and hobby clubs
• All the latest tech you need
• Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks