Audit-Ready Security & Compliance Engineer

OpenFX; New York (NY); On-site; USD 101,000 - 157,000; Full time

Benefits offered by this job

Equity

Growth opportunities

Impact on fintech

Job summary

OpenFX is seeking a Security & Compliance Engineer in Amsterdam to turn regulatory requirements into real, running controls and prove them to auditors. This senior role demands hands-on experience implementing DORA in production and delivering provable security across cloud and application layers.

You will own audit readiness for DORA, GDPR, SOC 2, ISO 27001 and partner with Legal, Compliance, and Engineering to embed compliant security across AWS, Kubernetes, and applications, ensuring evidence

Qualifications

• 6+ years in security engineering, cloud security, or compliance-focused security roles.
• Hands-on experience implementing DORA in production environments (ICT risk management, incident classification and reporting, vendor oversight).
• GDPR implementation experience is a strong bonus.
• Experience supporting SOC 2 and/or ISO 27001 audits (strong plus).
• Ability to translate regulatory requirements into technical controls.
• Strong working knowledge of AWS security fundamentals (IAM, logging, encryption).
• Comfortable owning auditor interactions and explaining systems clearly.
• Experience building or automating security/compliance processes (Python, Bash, Go).
• Accountability for an audit outcome.

Responsibilities

• Own audit-ready security controls across the platform.
• Design, implement, and maintain controls for DORA, GDPR, SOC 2, ISO 27001 and future regional requirements.
• Ensure controls are enforced across AWS, Kubernetes, and applications.
• Be the technical counterpart to Legal, Compliance & Risk.
• Translate regulatory language into concrete security mechanisms.
• Partner with Legal and Compliance to monitor new regulations and assess technical impact.
• Decide what is "good enough" vs. over-engineered for compliance.
• Run audits and manage evidence collection, walkthroughs, and remediation tracking.
• Build repeatable, automated evidence pipelines instead of last-minute scrambles.
• Be the person auditors trust when they ask, "Show me how this actually works."
• Embed compliance into the platform and work with engineering to design secure-by-default systems.
• Ensure logging, access controls, encryption, monitoring, and change management meet regulatory expectations.
• Automate compliance wherever possible
• Build tooling and scripts to validate controls (access reviews, logging coverage, config drift).
• Reduce manual compliance work over time by pushing checks into code and infrastructure.

Skills

Security engineering

DORA implementation

GDPR

SOC 2 / ISO 27001

Regulatory translation

AWS security

Auditor interaction

Scripting (Python, Bash, Go)

Audit ownership

Tools

Kubernetes

AWS GuardDuty

AWS Config

AWS Security Hub

SAST/DAST tooling

Python

Bash

Go

Job description

OpenFX is seeking a Security & Compliance Engineer in Amsterdam to turn regulatory requirements into real, running controls and prove them to auditors. This senior role demands hands-on experience implementing DORA in production and delivering provable security across cloud and application layers.

You will own audit readiness for DORA, GDPR, SOC 2, ISO 27001 and partner with Legal, Compliance, and Engineering to embed compliant security across AWS, Kubernetes, and applications, ensuring evidence