Security Compliance Engineer

At Yuno, we are building the payment infrastructure that allows all companies to participate in the global market. Founded by seasoned experts from the payments and tech industries, our technology provides access to leading payment capabilities, enabling companies to engage customers confidently and maintain global operations through seamless integrations.

We empower high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus to integrate over 1,000 payment methods via a single API. By leveraging advanced AI and the latest technologies, we orchestrate smart routing and fraud prevention across 80+ countries. 

We are orchestrating the best high-performing team!

As a Security Compliance Engineer at Yuno, you will play a key role in ensuring our security and privacy programs meet the highest industry standards. In this role, you will actively contribute to ISOs, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into auditable technical controls. You will collaborate closely with Engineering and DevOps teams to implement cloud security controls across AWS and GCP, build internal security tooling using Python, and support privacy-focused initiatives that enable Yuno to operate securely and compliantly in the global payments ecosystem.

• Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team.

• Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable.

• Develop and maintain internal security tools using Python, supporting security operations and contributing to stronger technical controls.

• Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.

• Practical experience working with ISO audits and translating controls into technical implementations.

• Experience in fintech, payments, or highly regulated environments

• Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective.

• Understanding of privacy requirements and frameworks.

• Working knowledge of Python, with the ability to build and maintain simple tooling.

• Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.).

• Strong collaboration skills and English fluency.

• Familiarity with kubernetes or container security.

• Familiarity with infrastructure as Code (Terraform, CloudFormation).

• Experience with vendor risk management and third-party security reviews.

• Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).