Security & Compliance Engineer - Fintech

Security & Compliance Engineer – Fintech

UAE

Early-stage Fintech

AED 30,000-40,000

I’m working with a fast-growing, venture-backed fintech business that is building cloud-native lending technology for banks and financial institutions across the MENA region.

Following recent investment and continued growth, they’re looking for a Security & Compliance Engineer to take ownership of security across their technology platform.

This is not a pure GRC/compliance position. We’re looking for someone who is technically hands-on and comfortable working directly with software engineers, while also understanding the security and regulatory requirements of operating within financial services.

The Role

You’ll work closely with engineering and product teams to embed security throughout the development lifecycle and help build security practices as the organisation scales.

Responsibilities will include:

• Securing a cloud-native Microsoft Azure environment
• Application and API security
• Implementing security throughout the SDLC / DevSecOps lifecycle
• Conducting penetration testing and vulnerability assessments
• Secure code reviews and working directly with developers on remediation
• Vulnerability management and security hardening
• IAM across technologies such as Microsoft Entra ID / Azure AD and Okta
• Security monitoring and incident response
• SIEM technologies including Microsoft Sentinel and/or Splunk
• Encryption, tokenisation, secrets and key management
• Supporting security architecture for APIs and third-party integrations
• Implementing and improving technical security controls
• Supporting compliance with PCI-DSS, ISO 27001 and GDPR
• Supporting requirements associated with financial-services regulators in the UAE and wider GCC

What We're Looking For

Ideally 5–10+ years' experience within Security Engineering, Cloud Security, Application Security or DevSecOps.

You'll ideally bring:

• Strong hands-on Azure security experience
• Application and API security knowledge
• Secure SDLC / DevSecOps experience
• Penetration testing and vulnerability management skills
• Experience working directly with software engineering teams
• Strong understanding of IAM, encryption and key management
• SIEM/security monitoring experience
• Knowledge of PCI-DSS and ISO 27001
• Exposure to UAE financial-services regulatory requirements
• SAMA experience would be highly desirable
• Experience within fintech, payments, digital banking, lending, banking technology or another regulated technology environment

The Environment

This is an early-stage technology company, so we're looking for someone who enjoys building rather than simply maintaining.

You'll need to be comfortable taking ownership, working independently, moving quickly and establishing security practices without relying on a large security team or extensive existing processes.

If you're a hands-on security engineer who wants the opportunity to shape security within a rapidly scaling fintech platform, apply here.