Security Automation & Risk Orchestration Engineer

Bvnk Ltd; South Africa; Hybrid; ZAR 1,482,000 - 1,976,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid/Remote policy

Global offices accessible

Open and creative environment

Job summary

BVNK Ltd seeks an experienced Security Operations & Risk Automation Engineer to fortify and scale its information security function. You will design automated controls to reduce risk, enforce regulatory guardrails, and govern the company’s bug bounty program across diverse environments.

You will collaborate with the Information Security Architect and GRC expert to implement risk mitigations and ensure alignment with EU AI Act, DORA, MiCA, GDPR, and AML frameworks while integrating automated

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
• 2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role.
• Vulnerability Program Exposure: Prior exposure to managing or triage coordination for a bug bounty platform is a strong plus.
• Platform Experience: Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms is a plus.
• Risk Identification & Mitigation: Analytical capabilities to isolate operational vulnerabilities within customised environments and third-party integrations.
• Regulated Fintech Exposure: Experience with AML rules, MiCA guidelines, and DORA requirements.
• Technical Scaffolding & Automation: Ability to translate regulatory mandates into programmatic triggers and automated detection mechanisms.
• Architectural Literacy: Understanding of AWS, containers (Docker), microservices, and API ecosystems.
• Policy Crafting: Ability to author information security policies bridging engineering and compliance.

Responsibilities

• Systematic Risk Reduction: Design, build, and deploy automated workflows to identify and mitigate security risks across environments.
• Cross-System Access Automation: Orchestrate and streamline user access reviews across systems with distinct interfaces.
• Bug Bounty Programme Management: Manage external bug bounty program and validate findings for remediation.
• Regulatory Control Engineering: Lead risk mapping and governance for AI Act, DORA, MiCA, GDPR, AML alignment.
• Policy & Control Governance: Publish and maintain security policies reflecting objectives and new risk vectors.
• GRC Platform Optimisation: Optimize automated compliance platforms for risk register and audits.
• Project Management: Lead technical GRC initiatives from scoping to execution.

Skills

GRC automation

Risk assessment

Automation tooling

AWS & Docker

Education

Bachelor's degree in Information Security, CS, IT Audit or Risk Management

Tools

Vanta

HackerOne

Job description

BVNK Ltd seeks an experienced Security Operations & Risk Automation Engineer to fortify and scale its information security function. You will design automated controls to reduce risk, enforce regulatory guardrails, and govern the company’s bug bounty program across diverse environments.

You will collaborate with the Information Security Architect and GRC expert to implement risk mitigations and ensure alignment with EU AI Act, DORA, MiCA, GDPR, and AML frameworks while integrating automated