#vacancy #вакансия #security #compliance #grc #pci_dss #iso27001 #iso22301 #cyprus #complianceengineer #fintech

🧷Position: Security & Compliance Engineer (Mid-level) 📍Location: Limassol | Office-based ⚡️paytech — a fast-growing fintech company building payment technology for businesses worldwide. We’re looking for a mid-level Security & Compliance Engineer to support both client and internal compliance efforts across PCI DSS, ISO 27001, and ISO 22301. This is a GRC / compliance & security operations role (not SOC / pentesting / offensive security).

🧩Key Responsibilities:

• Support paytech clients during PCI DSS audits (Merchant & Service Provider)
• Maintain client compliance records: audit timelines, status, scope, key contacts, documentation
• Prepare and maintain audit evidence (policies, procedures, process descriptions, diagrams)
• Participate in internal audits & certifications: PCI DSS v4.0, ISO 27001, ISO 22301
• Act as primary point of contact for external auditors and QSA companies
• Develop/review internal security policies (access control, passwords, incident management, vendor management, etc.) and ensure they match real operations
• Partner with Engineering/DevOps/Product to explain requirements, close gaps, and review architecture/processes
• Maintain vendor/service registry and support basic vendor risk management

🗒Requirements: Must-have:

• 2–5 years in information security, compliance, or GRC roles
• Practical PCI DSS experience (audit participation, evidence, remediation)
• Familiarity with ISO 27001 and ISO 22301
• Experience with security policies, procedures, and audit documentation
• Strong communication with technical & non-technical stakeholders
• Comfortable working with auditors/compliance partners
• Good written and spoken English