安全合规工程师
Security Compliance Engineer
Individual Contributor, 基于 LATAM
我们是谁
在 Yuno，我们正在构建支付基础设施，使所有公司都能参与全球市场。由支付和 IT 行业的资深专家团队创立，Yuno 提供高性能的支付协调器。我们的技术使公司能够访问领先的支付功能，让他们有信心与客户互动，并在全球范围内无缝集成支付功能开展业务。
与 Yuno 一起塑造未来！
作为 Yuno 的安全合规工程师，你将在确保我们的安全和隐私计划符合最高行业标准方面发挥关键作用。在此职位中，你将从技术角度积极参与 ISO 27001、ISO 27701、SOC 2 和 PCI DSS 审计，将合规和隐私要求转化为可扩展、可衡量和可审计的技术控制。你将与工程和 DevOps 团队紧密合作，在 AWS 和 GCP 上实施云安全控制，使用 Python 构建内部安全工具，并支持以隐私为中心的项目，使 Yuno 能够在全球支付生态系统中安全合规地运营。
🟣 Yuno 将如何挑战你
- 积极参与 ISO 27001、ISO 27701、SOC 2 和 PCI DSS 审计流程，作为安全团队的一员，从技术和实施角度做出贡献。
- 将安全、合规和隐私要求转化为可扩展的技术控制，确保其可执行、可衡量和可审计。
- 使用 Python 设计、构建和维护安全且可扩展的内部安全解决方案和工具，以支持安全运营并加强技术控制。
- 与工程和 DevOps 团队合作，在 AWS 和 GCP 上实施并验证符合审计要求的云安全控制。
- 参与与隐私相关的技术项目，包括数据映射、控制自动化，以及与隐私框架和数据保护法规（如 ISO 27701、GDPR 等）的对齐。
🟣 你需要哪些技能？
最低资格要求：
- 具有 ISO 27001 审计的实际经验，并能将控制措施转化为技术实现。
- 从工程角度熟悉 SOC 2 和 PCI DSS 框架。
- 了解隐私要求和框架。
- 精通 Python，用于开发安全且易于维护的工具。
- 熟悉 AWS 或 GCP 的安全服务
查看英文原文
Individual Contributor, based LATAM
Who We Are
At Yuno, we are building the payment infrastructure that enables all companies to participate in the global market. Founded by a team of seasoned experts in the payments and IT industries, Yuno provides a high-performance payment orchestrator. Our technology offers companies access to leading payment capabilities, allowing them to engage customers confidently and maintain global business operations with seamless payment integrations worldwide.
Shape your future with Yuno!
As a Security Compliance Engineer at Yuno, you will play a key role in ensuring our security and privacy programs meet the highest industry standards. In this role, you will actively contribute to ISO 27001, ISO 27701, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into scalable, measurable, and auditable technical controls. You will collaborate closely with Engineering and DevOps teams to implement cloud security controls across AWS and GCP, build internal security tooling using Python, and support privacy-focused initiatives that enable Yuno to operate securely and compliantly in the global payments ecosystem.
🟣 How Yuno will challenge you
- Actively participate in ISO 27001, ISO 27701, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team.
- Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable.
- Design, build, and maintain secure and scalable internal security solutions and tools using Python to support security operations and strengthen technical controls.
- Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.
- Contribute to privacy-related technical initiatives, including data mapping, control automation, and alignment with privacy frameworks and data protection regulations (e.g., ISO 27701, GDPR, and similar).
🟣 The skills you need?
Minimum Qualifications:
- Practical experience working with ISO 27001 audits and translating controls into technical implementations.
- Familiarity with SOC 2 and PCI DSS frameworks from an engineering perspective.
- Understanding of privacy requirements and frameworks.
- Proficiency in Python for developing secure and maintainable tooling.
- Solid knowledge of AWS and/or GCP security services (IAM, logging, monitoring, WAF, etc.).
- Strong collaboration skills and English fluency.
Nice to have (Preferred)
- Experience with Kubernetes, container security, or CI/CD pipelines.
- Infrastructure as Code experience (Terraform, CloudFormation).
- Familiarity with vendor risk management and third-party security reviews.
- Experience in fintech, payments, or highly regulated environments.
- Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).
🟣 What we offer at Yuno
- Competitive Compensation
- Remote work - You can work from everywhere!
- Home Office Bonus - We offer a one time allowance to help you create your ideal home office.
- Work equipment
- Stock options
- Health Plan wherever you are
- Flexible Days off
- Language, Professional and Personal growth courses
Originally posted on Himalayas