paytech — a fast-growing fintech company building payment technology for businesses worldwide. Seeking a mid-level Security & Compliance Engineer to support client and internal compliance across PCI DSS, ISO 27001, and ISO 22301. This is a GRC / compliance & security operations role (not SOC / pentesting / offensive security).
Key responsibilities:
- Support paytech clients during PCI DSS audits (Merchant & Service Provider)
- Maintain client compliance records: audit timelines, status, scope, key contacts, documentation
- Prepare and maintain audit evidence (policies, procedures, process descriptions, diagrams)
- Participate in internal audits & certifications: PCI DSS v4.0, ISO 27001, ISO 22301
- Act as primary point of contact for external auditors and QSA companies
- Develop/review internal security policies (access control, passwords, incident management, vendor management, etc.) and ensure they match real operations
- Partner with Engineering/DevOps/Product to explain requirements, close gaps, and review architecture/processes
- Maintain vendor/service registry and support basic vendor risk management
Requirements (must-have):
- 2–5 years in information security, compliance, or GRC roles
- Practical PCI DSS experience (audit participation, evidence, remediation)
- Familiarity with ISO 27001 and ISO 22301
- Experience with security policies, procedures, and audit documentation
- Strong communication with technical & non-technical stakeholders
- Comfortable working with auditors/compliance partners
- Good written and spoken English
Nice-to-have:
- Fintech / payments / regulated industry experience
- Cloud security/compliance understanding (AWS or similar)
- Confluence (or similar) documentation experience
- Basic understanding of DevOps and modern engineering workflows
Conditions & benefits:
- Office-based in Limassol with a cozy office (coffee, snacks, drinks, PS5, rooftop view)
- Work equipment (Mac / Windows / Linux)
- Private medical insurance after probation + additional perks (incl. sport benefit, partial coverage)
- Wolt+ and lunch allowance + full work-permit support
- Growth opportunities in a low-bureaucracy fintech environment