Security Compliance Engineer

Yuno is building global payment infrastructure that enables companies to integrate payment methods through a single API. The Security Compliance Engineer will support ISO, SOC 2, and PCI DSS audits, translate compliance and privacy requirements into auditable technical controls, develop internal security tooling, and implement cloud security controls across AWS and GCP.

Responsibilities:

• Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team
• Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable
• Develop and maintain internal security tools using Python, supporting security operations and contributing to stronger technical controls
• Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements

Requirements:

• Practical experience working with ISO audits and translating controls into technical implementations
• Experience in fintech, payments, or highly regulated environments
• Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective
• Understanding of privacy requirements and frameworks
• Working knowledge of Python, with the ability to build and maintain simple tooling
• Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.)
• Strong collaboration skills and English fluency
• Familiarity with kubernetes or container security
• Familiarity with infrastructure as Code (Terraform, CloudFormation)
• Experience with vendor risk management and third-party security reviews
• Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations)