SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: EUR 55,000 - 80,000 / annual
BVNK, now part of Mastercard, is a stablecoin-powered financial stack enabling enterprises to build financial products, unlock new markets, and move money across 130+ countries. The company processes billions annually and is trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire.
We are seeking an experienced Security Operations & Risk Automation Engineer to join our Information Security team. This role is pivotal in fortifying and scaling our information security function by leveraging automation technologies to reduce systemic risk, continuously discovering vulnerabilities, automating user access reviews, and enforcing compliance guardrails across decentralized environments.
The ideal candidate is a technical security or risk professional who designs automated processes to monitor custom tools and decentralized systems, significantly lowering the company's risk footprint. You will establish and govern BVNK's bug bounty programme, translating external vulnerability findings into internal security policy improvements. You will lead the engineering of automated controls required to satisfy regulatory frameworks such as the EU AI Act, DORA, AML, MiCA, and others.
Key responsibilities include:
- Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools
- Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems
- Implement, manage, and scale the company's external bug bounty programme, acting as the primary internal interface to validate crowdsourced findings and track remediation
- Lead technical risk mapping and operational governance for applicable regulations (DORA, MiCA, AI Act, GDPR, AML)
- Formulate, publish, and maintain information security and operational risk policies reflecting corporate security objectives
- Administer and optimize automated compliance platforms to manage the internal risk register and monitor control effectiveness
- Autonomously lead technical GRC initiatives from scoping through execution, managing timelines and coordinating across cross-functional teams
You will work closely with the Information Security Architect and Information Security GRC expert to define and implement risk mitigations based on assessments, audits, and regulatory frameworks.
REQUIREMENTS:
- Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience
- 2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role
- Prior exposure to managing or triage coordination for a bug bounty platform (e.g., HackerOne, Bugcrowd) or working closely with external application security researchers (strong plus)
- Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms (plus)
- Exceptional analytical capabilities to isolate operational vulnerabilities within heavily customized environments, third-party software integrations, and decentralized access registers
- Direct experience managing controls aligned with financial and cybersecurity frameworks, specifically including AML rules, MiCA guidelines, and DORA requirements
- Skill in translating regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, implementing AI and other technical tools at scale
- Strong conceptual understanding of modern infrastructure components—Amazon AWS, containers (Docker), microservices architecture, and API ecosystems
- Proven ability to author clear, executive-ready information security policies that bridge engineering workflows with financial-grade compliance obligations
