Senior Security Engineer
Skills
About the Role
You will lead security certification programmes such as ISO 27001 SOC 2 and PCI DSS and collaborate with engineering and infrastructure teams to implement security controls for compliance You will drive security policy development risk assessments and control implementation You will coordinate internal and external audits and manage relationships with auditors You will improve visibility of security risks and ensure controls are operating effectively You will partner with engineering teams to embed security practices into development and infrastructure workflows You will contribute to broader security initiatives across the organisation
Requirements
- Strong experience in security engineering, security operations, or security programmes
- Hands-on experience delivering or coordinating a compliance certification (ISO 27001, SOC 2, PCI-DSS)
- Experience implementing security controls across infrastructure, cloud, or engineering environments
- Ability to work cross-functionally with engineering, operations, and leadership teams
- Experience managing security documentation, policies, and control frameworks
- Strong communication and stakeholder management skills
- Nice to have experience working in crypto Web3 fintech or digital asset environments
- Understanding of security risks specific to crypto or financial infrastructure
- Experience leading security initiatives, projects, or small teams
- Background working in startup or high-growth environments
- Technical background in infrastructure, DevOps, or systems administration
Responsibilities
- Lead and coordinate security certification programmes (ISO 27001 SOC 2 PCI-DSS)
- Work with engineering and infrastructure teams to implement security controls required for compliance frameworks
- Drive security policy development and risk assessments and control implementation
- Coordinate internal and external audits and manage relationships with auditors
- Improve visibility of security risks and ensure controls are operating effectively
- Partner with engineering teams to ensure security practices are embedded into development and infrastructure workflows
- Contribute to broader security initiatives across the organisation
