Security Compliance Engineer

Latam · Remote · Full Time · Individual Contributor

---

Who We Are

At Yuno, we are building the payment infrastructure that allows all companies to participate in the global market. Founded by seasoned experts from the payments and tech industries, our technology provides access to leading payment capabilities, enabling companies to engage customers confidently and maintain global operations through seamless integrations.

We empower high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus to integrate over 1,000 payment methods via a single API. By leveraging advanced AI and the latest technologies, we orchestrate smart routing and fraud prevention across 80+ countries. 

---

About The Role

We are orchestrating the best high-performing team!

As a Security Compliance Engineer at Yuno, you will play a key role in ensuring our security and privacy programs meet the highest industry standards. In this role, you will actively contribute to ISO 27001, ISO 27701, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into scalable, measurable, and auditable technical controls. You will collaborate closely with Engineering and DevOps teams to implement cloud security controls across AWS and GCP, build internal security tooling using Python, and support privacy-focused initiatives that enable Yuno to operate securely and compliantly in the global payments ecosystem.

Your Contribution Will Be

• Actively participate in ISO 27001, ISO 27701, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team.
• Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable.
• Design, build, and maintain secure and scalable internal security solutions and tools using Python to support security operations and strengthen technical controls.
• Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.
• Contribute to privacy-related technical initiatives, including data mapping, control automation, and alignment with privacy frameworks and data protection regulations (e.g., ISO 27701, GDPR, and similar).

---

Skills You Need

Minimum Qualifications

• Practical experience working with ISO 27001 audits and translating controls into technical implementations.
• Familiarity with SOC 2 and PCI DSS frameworks from an engineering perspective.
• Understanding of privacy requirements and frameworks.
• Proficiency in Python for developing secure and maintainable tooling.
• Solid knowledge of AWS and/or GCP security services (IAM, logging, monitoring, WAF, etc.).
• Strong collaboration skills and English fluency.

Preferred Qualifications

• Experience with Kubernetes, container security, or CI/CD pipelines.
• Infrastructure as Code experience (Terraform, CloudFormation).
• Familiarity with vendor risk management and third-party security reviews.
• Experience in fintech, payments, or highly regulated environments.
• Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).

---

What We Offer at Yuno

• Competitive Compensation.
• Remote Work – You can work from everywhere!
• Home Office Bonus – A one-time allowance to help you create your ideal home office.
• Work Equipment.
• Stock Options.
• Health Plan wherever you are.
• Flexible Days Off.
• Language, Professional, and Personal Growth courses.