SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Yuno is building payment infrastructure that enables companies to participate in the global market. The company provides access to leading payment capabilities through a single API, orchestrating smart routing and fraud prevention across 80+ countries for clients like InDrive, McDonald's, Rappi, and Viva Aerobus.
As a Security Compliance Engineer, you will play a key role in ensuring Yuno's security and privacy programs meet the highest industry standards. You will actively contribute to ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into auditable technical controls.
Key responsibilities include:
- Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team
- Translate security, compliance, and privacy requirements into scalable technical controls that are enforceable, measurable, and auditable
- Develop and maintain internal security tools using Python to support security operations and strengthen technical controls
- Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements
- Collaborate closely with cross-functional teams to ensure compliance initiatives enable Yuno to operate securely in the global payments ecosystem
This is a fully remote role based in LATAM, offering the opportunity to work on critical security infrastructure for a high-growth fintech company serving global payment operations.
QUALIFICATIONS:
Minimum Requirements:
- Practical experience working with ISO audits and translating controls into technical implementations
- Experience in fintech, payments, or highly regulated environments
- Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective
- Understanding of privacy requirements and frameworks
- Working knowledge of Python with the ability to build and maintain simple tooling
- Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.)
- Strong collaboration skills and English fluency
Preferred Qualifications:
- Familiarity with Kubernetes or container security
- Familiarity with Infrastructure as Code (Terraform, CloudFormation)
- Experience with vendor risk management and third-party security reviews
- Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations)
