Security Operations & Risk Automation Engineer

About the role

Bvnk is a stablecoin-powered financial platform that aims to enhance global money movement for enterprises. As part of Mastercard, Bvnk provides infrastructure for businesses to seamlessly send, receive, and convert fiat and digital assets across over 130 countries.

In this role, you will build and deploy automated workflows to identify and mitigate security risks, manage a bug bounty program, and ensure compliance with various regulations. Success will involve effectively integrating automated compliance tools and managing cross-system access while collaborating with diverse teams.

The salary range for this role is between $59,500 and $86,500, based on experience and relevant certifications.

Skills that matter here

• Information Security: This role focuses on enhancing the company's information security function and developing policies.
• Risk Management: You will be responsible for identifying and mitigating security risks through automated processes.
• Automation: The position emphasizes automating workflows for risk management and compliance.
• Compliance: You will ensure adherence to regulations like GDPR and AML in your security practices.
• AWS: Familiarity with AWS is crucial for overseeing risk in technical environments.
• Docker: Understanding Docker is important for managing modern infrastructure components.

Who this role suits

• Candidates with a strong analytical mindset and experience in risk identification will thrive.
• Individuals who are comfortable working autonomously and leading technical initiatives will excel.
• A background in regulated fintech environments will be beneficial for success in this role.
• Those who appreciate a flexible working culture and value diversity in teams will find a good fit.

From the employer

Key Areas of Responsibilities

• Systematic Risk Reduction: Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools.
• Cross-System Access Automation: Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems that may utilise independent user management interfaces.
• Bug Bounty Programme Management: Implement, manage, and scale the company's external bug bounty programme. Act as the primary internal interface to validate crowdsourced findings and track them through to successful remediation.
• Regulatory Control Engineering (AI Act, DORA, MiCA, etc.): Lead the technical risk mapping and operational governance for the applicable regulations. Maintain consistent control alignment with the Digital Operational Resilience Act (DORA), MiCA, AI Act, GDPR, AML regulations, and global operational resilience principles by integrating Vanta with other tools and processes.
• Policy & Control Governance: Formulate, publish, and maintain information security and operational risk policies that reflect corporate security objectives while integrating newly identified risk vectors, focusing on technical governance for AI and newly emerging threats.
• GRC Platform Optimisation: Administer and optimise automated compliance platforms to manage the internal risk register, monitor control effectiveness, and drive hands-free audit evidence gathering by integrating and extending the capabilities of AI and other technical tools.
• Project Management: Autonomously lead technical GRC initiatives from scoping through to execution, managing timelines, tracking resource dependencies, and coordinating across cross-functional infrastructure teams.

What we need from you

• Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
• 2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role.
• Vulnerability Program Exposure: Prior exposure to managing or triage coordination for a bug bounty platform (e.g., HackerOne, Bugcrowd) or working closely with external application security researchers is a strong plus.
• Platform Experience: Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms is a plus.
• Risk Identification & Mitigation: Exceptional analytical capabilities to isolate operational vulnerabilities within heavily customised environments, third-party software integrations, and decentralized access registers.
• Regulated Fintech Exposure: Direct experience managing controls aligned with financial and cybersecurity frameworks, specifically including AML rules, MiCA guidelines, and DORA requirements.
• Technical Scaffolding & Automation: Skill in translating text-heavy regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, implementing AI and other technical tools at scale.
• Architectural Literacy: Strong conceptual understanding of modern infrastructure components—such as Amazon AWS, containers (Docker), microservices architecture, and API ecosystems—enabling effective risk oversight in highly technical environments.
• Policy Crafting: Proven ability to author clear, executive-ready information security policies that bridge engineering workflows with financial-grade compliance obligations.

What you can expect from us

• Fair and competitive salary at every stage of your growth
• Flexible working hours, with hybrid working at its heart
• A culture built on passionate, growth-minded people
• A flexible approach to holiday
• Opportunities to travel to our offices around the world
• An open and creative environment where you can help us define the future of BVNK, its culture, and its opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. You may be a great fit for this role or another role in our team.

Compensation packages are based on candidate experience and relevant certifications.