Security & Compliance Engineer (Mid-level)

О вакансии

Mid-level Security & Compliance Engineer to support client and internal compliance efforts across PCI DSS, ISO 27001, and ISO 22301. GRC/compliance & security operations role (not SOC/pentesting). Support clients during audits, maintain compliance records, prepare audit evidence, participate in internal audits and certifications

Требования

• 2–5 years in information security, compliance, or GRC roles
• Practical PCI DSS experience (audit participation, evidence, remediation)
• Familiarity with ISO 27001 and ISO 22301
• Experience with security policies, procedures, and audit documentation
• Strong communication with technical & non-technical stakeholders
• Comfortable working with auditors/compliance partners
• Good written and spoken English
• Nice-to-have: Fintech/payments/regulated industry experience
• Nice-to-have: Cloud security/compliance understanding (AWS or similar)
• Nice-to-have: Confluence documentation experience
• Nice-to-have: Basic understanding of DevOps and modern engineering workflows

Источник: Telegram-канал Job in IT || Вакансии в IT || Remote || Удаленка