Security & Compliance Engineer (Mid-level)

О вакансии

Mid-level Security & Compliance Engineer to support client and internal compliance efforts across PCI DSS, ISO 27001, and ISO 22301. GRC/compliance & security operations role focused on audit support, evidence preparation, policy development, and vendor management

Требования

• 2–5 years in information security, compliance, or GRC roles
• Practical PCI DSS experience (audit participation, evidence, remediation)
• Familiarity with ISO 27001 and ISO 22301
• Experience with security policies, procedures, and audit documentation
• Strong communication with technical & non-technical stakeholders
• Comfortable working with auditors/compliance partners
• Good written and spoken English
• Fintech/payments/regulated industry experience (nice-to-have)
• Cloud security/compliance understanding - AWS or similar (nice-to-have)
• Confluence documentation experience (nice-to-have)
• Basic understanding of DevOps and modern engineering workflows (nice-to-have)

Источник: Telegram-канал CY IT HR Vacancy