# Security Compliance Engineer

**Company**: Yuno
**Location**: Spain
**Work arrangement**: remote
**Experience**: senior
**Job type**: Remote
**Category**: Engineering
**Industry**: Technology

**Apply**: https://jobs.lever.co/yuno/2919c9d5-3740-4772-9b43-c014732cf257?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9f5cd549-4d7

## Description

## Job Overview

As a Security Compliance Engineer at Yuno, you will play a key role in ensuring the company's security and privacy programs meet the highest industry standards. You will contribute to ISOs, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into auditable technical controls.

## Key Responsibilities

- Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team.

- Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable.

- Develop and maintain internal security tools using Python, supporting security operations and contributing to stronger technical controls.

- Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.

## Requirements

- Practical experience working with ISO audits and translating controls into technical implementations.

- Experience in fintech, payments, or highly regulated environments.

- Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective.

- Understanding of privacy requirements and frameworks.

- Working knowledge of Python, with the ability to build and maintain simple tooling.

- Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.).

- Strong collaboration skills and English fluency.

## Preferred Qualifications

- Familiarity with Kubernetes or container security.

- Familiarity with infrastructure as Code (Terraform, CloudFormation).

- Experience with vendor risk management and third-party security reviews.

- Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).

## Benefits

- Competitive Compensation.

- Remote Work – You can work from everywhere!

- Home Office Bonus – A one-time allowance to help you create your ideal home office.

- Work Equipment.

- Stock Options.

- Health Plan wherever you are.

- Flexible Days Off.

## Skills

### Required
- ISO audits
- fintech
- SOC 2
- PCI DSS
- Python
- AWS
- GCP
- cloud security

### Nice to have
- Kubernetes
- container security
- Terraform
- CloudFormation
- vendor risk management
- serverless
- event-driven
- AI integrations

---

Source: [Apply at jobs.lever.co](https://jobs.lever.co/yuno/2919c9d5-3740-4772-9b43-c014732cf257?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)