Position listed on behalf of a partner company that manages all applications and next steps.
Partner is looking for a Security Compliance Engineer based in Mexico.
Responsibilities
Contribute to security audits and certification processes, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and PCI DSS.
Translate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable.
Collaborate with Engineering and DevOps teams to implement, maintain, and validate cloud security controls across AWS and GCP.
Develop and maintain internal security tools using Python to automate security processes.
Support implementation and continuous improvement of cloud security measures, including web application firewalls, threat detection, security monitoring, and cloud security posture management.
Ensure technical configurations, security processes, and supporting evidence meet audit requirements and industry standards.
Contribute to privacy-focused initiatives by integrating data protection principles into technical systems.
Support security risk management activities, including vendor risk assessments and third-party security reviews.
Work cross-functionally to identify control gaps, recommend remediation measures, and promote security and compliance best practices.
Stay informed about emerging technologies, cloud security developments, and evolving regulatory requirements.
Requirements
Practical experience supporting ISO audits and translating compliance requirements into technical implementations.
Previous experience in fintech, payments, financial services, or another highly regulated environment.
Familiarity with SOC 2 and/or PCI DSS frameworks, particularly their technical implementation.
Understanding of information security, privacy principles, data protection requirements, and relevant compliance frameworks.
Working knowledge of Python.
Solid knowledge of AWS and/or GCP security services, including web application firewalls, threat detection, security monitoring, and security posture management.
Strong collaboration and communication skills.
Fluency in English, both written and spoken.
Familiarity with Kubernetes and container security is an advantage.
Experience with infrastructure as code tools such as Terraform or CloudFormation is desirable.
Knowledge of vendor risk management processes and third-party security assessments is a plus.
Familiarity with modern architectures, including serverless applications, event-driven systems, and AI integrations, is beneficial.
Conditions
Competitive compensation package.
Fully remote working arrangements.
One-time home office allowance.
Work equipment provided.
Stock options.
Health plan coverage.
Flexible days off.
Opportunity to work on security and compliance challenges within a global payments technology environment.
Exposure to modern cloud infrastructure, security automation, privacy engineering, and internationally recognized compliance frameworks.