Security Operations & Risk Automation Engineer - Hybrid/Remote

Bvnk Ltd; Cape Town; Hybrid; ZAR 1,018,000 - 1,481,000; Full time

Benefits offered by this job

Flexible hours

Hybrid work policy

Travel opportunities

Open, creative environment

Job summary

BVNK seeks an experienced Security Operations & Risk Automation Engineer to fortify and scale our information security function. You will design automated processes to monitor tools and decentralized systems, reduce risk, and govern BVNK's bug bounty programme.

You will translate regulatory mandates into automated controls while leading cross‑functional security initiatives. The role collaborates with the Information Security Architect and GRC expert to implement risk mitigations based on audits

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
• 2–4 years of experience in technical GRC or automation-focused information security roles.
• Experience with bug bounty platforms (e.g., HackerOne, Bugcrowd) is a plus.

Responsibilities

• Design automated workflows to identify and mitigate security risks across environments.
• Automate user access reviews across systems with varying management interfaces.
• Lead the bug bounty programme, validate findings, and drive remediation.
• Map regulatory requirements (DORA, MiCA, AI Act, GDPR, AML) to technical controls.

Skills

GRC automation

Vulnerability management

Bug bounty programs

Regulatory compliance (DORA, MiCA, AI/

Education

Bachelor's degree in Information Security or related field

Tools

Vanta

AWS

Docker

Job description

BVNK seeks an experienced Security Operations & Risk Automation Engineer to fortify and scale our information security function. You will design automated processes to monitor tools and decentralized systems, reduce risk, and govern BVNK's bug bounty programme.

You will translate regulatory mandates into automated controls while leading cross‑functional security initiatives. The role collaborates with the Information Security Architect and GRC expert to implement risk mitigations based on audits