Skip to content

Yuno

Security Compliance Engineer

Location
Spain, ES
Arrangement
Remote
Employment type
Other
Posted
9 October 2026 (6 days ago)

Checked 6 days agoApplications go to the employer, never to RoleSprint

About this role

Latam · Remote · Full Time · Individual Contributor

Who We Are At Yuno, we are building the payment infrastructure that allows all companies to participate in the global market. Founded by seasoned experts from the payments and tech industries, our technology provides access to leading payment capabilities, enabling companies to engage customers confidently and maintain global operations through seamless integrations. We empower high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus to integrate over 1,000 payment methods via a single API. By leveraging advanced AI and the latest technologies, we orchestrate smart routing and fraud prevention across 80+ countries.

About The Role We are orchestrating the best high-performing team! As a Security Compliance Engineer at Yuno, you will play a key role in ensuring our security and privacy programs meet the highest industry standards. In this role, you will actively contribute to ISOs, SOC 2, and PCI DSS audits from a technical perspective, translating compliance and privacy requirements into auditable technical controls. You will collaborate closely with Engineering and DevOps teams to implement cloud security controls across AWS and GCP, build internal security tooling using Python, and support privacy-focused initiatives that enable Yuno to operate securely and compliantly in the global payments ecosystem. Your Contribution Will Be Actively participate in ISO 27001/27701, ISO 42001, SOC 2 and PCI DSS audit processes, contributing from a technical and implementation perspective as part of the Security team. Translate security, compliance, and privacy requirements into scalable technical controls, ensuring they are enforceable, measurable, and auditable. Develop and maintain internal security tools using Python, supporting security operations and contributing to stronger technical controls. Work with Engineering and DevOps teams to implement and validate cloud security controls in AWS and GCP aligned with audit requirements.

Skills You Need Minimum Qualifications Practical experience working with ISO audits and translating controls into technical implementations. Experience in fintech, payments, or highly regulated environments Familiarity with SOC 2 or PCI DSS frameworks from an engineering perspective. Understanding of privacy requirements and frameworks. Working knowledge of Python, with the ability to build and maintain simple tooling. Solid knowledge of AWS and/or GCP security services (WAF, Guard Duty, Security Hub, monitoring, etc.). Strong collaboration skills and English fluency. Preferred Qualifications Familiarity with kubernetes or container security. Familiarity with infrastructure as Code (Terraform, CloudFormation). Experience with vendor risk management and third-party security reviews. Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations).

What We Offer at Yuno Competitive Compensation. Remote Work – You can work from everywhere! Home Office Bonus – A one-time allowance to help you create your ideal home office. Work Equipment. Stock Options. Health Plan wherever you are. Flexible Days Off.

Locations

  • ES
  • CO
  • CL
  • PY
  • PR
  • MX
  • Bogota, ES
  • DO
  • EC
  • Europe, ES
  • Lima, ES
  • Montevideo, ES
  • AR

Related jobs

Ready to make a decision?

This role is either worth your time or it isn’t.

Analyze the posting against your experience, see the gaps clearly, and build the right materials only if the opportunity makes sense.

Nothing is submitted automatically. You choose what happens next.

About this listing

Advertised by Yuno and published on Lever, the applicant tracking system they use.

RoleSprint is not the employer and not a recruiter. Applications are made on the employer’s own site and never reach us; what RoleSprint does is help you decide whether a role is worth your time and prepare for it if it is.

Published 9 October 2026, last checked 6 days ago. A posting stops being advertised here 90 days after the employer published it, and one the employer takes down is marked closed rather than quietly removed.

Browse all current openings

No credit card requiredStart free