Security and Compliance Engineer
Pubblicato il 24-10-2026 - Jobgether in Italia
Our partner is looking for a Security Compliance Engineer based in Italy. /b /ppAs a Security Compliance Engineer, you will play a key role in strengthening security, privacy, and regulatory compliance across a global payments technology environment. Working closely with Security, Engineering, and DevOps teams, you will help secure cloud infrastructure across AWS and GCP while supporting international audit and certification processes. You will also develop Python-based security tools and contribute to initiatives that improve risk management and operational resilience. This role offers the opportunity to combine hands-on engineering with security governance in a fast-paced, highly regulated industry. Your work will directly support the protection of sensitive data, the reliability of payment infrastructure, and the trust of customers and partners worldwide. /ph3Accountabilities: /h3ulliContribute to security audits and certification processes, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and PCI DSS, providing technical expertise and implementation support. /liliTranslate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable. /liliCollaborate with Engineering and DevOps teams to implement, maintain, and validate cloud security controls across AWS and GCP environments. /liliDevelop and maintain internal security tools using Python to automate security processes, improve operational efficiency, and strengthen technical safeguards. /liliSupport the implementation and continuous improvement of cloud security measures, including web application firewalls, threat detection, security monitoring, and cloud security posture management. /liliHelp ensure that technical configurations, security processes,
and supporting evidence meet applicable audit requirements and industry standards. /liliContribute to privacy-focused initiatives by helping integrate data protection principles and privacy requirements into technical systems and operational workflows. /liliSupport security risk management activities, including vendor risk assessments and third-party security reviews where required. /liliWork cross-functionally to identify control gaps, recommend remediation measures, and promote security and compliance best practices throughout the organization. /liliStay informed about emerging technologies, cloud security developments, and evolving regulatory requirements relevant to payments and financial technology. /h3ulliPractical experience supporting ISO audits and translating compliance requirements into effective technical implementations. /liliPrevious experience in fintech, payments, financial services, or another highly regulated environment. /liliFamiliarity with SOC 2 and/or PCI DSS frameworks, particularly their technical implementation and application to engineering environments. /liliUnderstanding of information security, privacy principles, data protection requirements, and relevant compliance frameworks. /liliWorking knowledge of Python, with the ability to develop, maintain, and improve scripts or lightweight security tools. /liliSolid knowledge of AWS and/or GCP security services,
including capabilities such as web application firewalls, threat detection, security monitoring, and security posture management. /liliStrong collaboration and communication skills, with the ability to work effectively with technical teams and translate compliance requirements into practical engineering solutions. /liliFluency in English, both written and spoken, to support collaboration across distributed teams and international stakeholders. /liliFamiliarity with Kubernetes and container security is an advantage. /liliExperience with infrastructure as code tools, such as Terraform or CloudFormation, is desirable. /liliKnowledge of vendor risk management processes and third-party security assessments is a plus. /liliFamiliarity with modern architectures, including serverless applications, event-driven systems, and AI integrations, is beneficial. /liliA proactive, detail-oriented approach to problem-solving, with a strong sense of ownership and a commitment to maintaining robust security and compliance standards. /liliFully remote working arrangements, offering flexibility in where you work, subject to the role's location and employment requirements. /liliOne-time home office allowance to help you establish a comfortable and productive remote workspace. /liliWork equipment provided to support your day-to-day responsibilities. /liliHealth plan coverage, with arrangements available for employees in different locations. /liliFlexible days off to support work-life balance and personal well-being. /liliThe opportunity to work on security and compliance challenges within a global payments technology environment. /liliExposure to modern cloud infrastructure, security automation, privacy engineering, and internationally recognized compliance frameworks. /liliThe op