Description
About Us
OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Lightspeed, NfX and other top-tier investors.
Role Overview
We are looking for a Security & Compliance Engineer to turn regulatory requirements into real, running controls — and then prove to auditors that they work. This is a senior, hands-on role for someone who thrives in fast-paced, heavily regulated environments and knows how to make compliance provable in production rather than on paper.
OpenFX is expanding across Europe in a heavily regulated financial environment. As we scale into EU markets, regulators, auditors, and enterprise partners expect provable, continuously operating security controls — not slide decks or one-off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region-specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close that gap.
You will own the security controls and evidence that regulators and auditors care about, end to end — from translating regulatory language into concrete mechanisms through to audit walkthroughs and remediation. You will partner closely with Legal, Compliance, Risk, and engineering to ensure compliance is built into the platform rather than bolted on after the fact.
This role is based in Amsterdam, Netherlands (EU/EEA).
Key Responsibilities:
- Own audit-ready security controls
- Design, implement, and maintain technical and operational controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements.
- Ensure controls are not just documented, but actually enforced in AWS, Kubernetes, and application layers.
- Be the technical counterpart to Legal, Compliance & Risk
- Translate regulatory language into concrete security mechanisms.
- Partner with Legal and Compliance to monitor new regulations and assess technical impact.
- Decide what is "good enough" vs. over-engineered for compliance.
- Run audits instead of reacting to them
- Own audit preparation, evidence collection, walkthroughs, and remediation tracking.
- Build repeatable, automated evidence pipelines instead of last-minute scrambles.
- Be the person auditors trust when they ask, "Show me how this actually works."
- Embed compliance into the platform
- Work with engineering to design systems that are secure by default and defensible to regulators.
- Ensure logging, access controls, encryption, monitoring, and change management meet regulatory expectations.
- Automate compliance wherever possible
- Build tooling and scripts to continuously validate controls (access reviews, logging coverage, config drift).
- Reduce manual compliance work over time by pushing checks into code and infrastructure.
What we are looking for
Must-haves:
- 6+ years in security engineering, cloud security, or compliance-focused security roles.
- Hands-on, operational experience implementing DORA in a production/regulated environment (not advisory only) — e.g. ICT risk management, incident classification and reporting, third-party/ICT vendor oversight, and digital operational resilience testing. GDPR implementation experience is a strong bonus.
- Experience supporting SOC 2 and/or ISO 27001 audits (strong plus).
- Ability to translate regulatory requirements into technical controls.
- Strong working knowledge of AWS security fundamentals (IAM, logging, encryption, networking).
- Comfortable owning auditor interactions and explaining systems clearly.
- Experience building or automating security/compliance processes (Python, Bash, Go, etc.).
- Accountability for an audit outcome — if you've never owned one, this role is not a fit.
What helps you stand out:
- Experience securing Kubernetes environments.
- Familiarity with AppSec tooling (SAST/DAST, manual testing).
- Experience with AWS security services (GuardDuty, Config, Security Hub).
- Prior work in fintech, payments, or regulated infrastructure.
- Security or compliance certifications (CISSP, CISA, ISO 27001 Lead Implementer, AWS Security).
- Familiarity with EU financial regulators and national competent authorities (e.g. DNB/AFM in the Netherlands, EBA/ESMA).
What We Offer
- Competitive salary and benefits package.
- Equity in a rapidly growing company.
- Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
- Opportunity to make a significant impact on global financial infrastructure
- Collaborative work culture with emphasis on personal and professional growth.
We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Similar jobs
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…
Est. 150,000 USD
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We build the infrastructure that powers cross-border payments for institutions: programmatic…
Head of Compliance Operations Bangalore, India / Dubai, UAE / London, UK About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 80,000 GBP
About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Who we are Optiver is a global market maker founded in Amsterdam, with offices in London, Chicago, Austin, New York, Sydney, Shanghai, Hong Kong, Singapore, Taipei and Mumbai. Established in 1986, today we are a leading…
Est. 160,000 USD
Founded in 2004, NetBrain is the leader in no-code network automation. Its ground-breaking Next-Gen platform provides IT operations teams with the ability to scale their hybrid multi-cloud connected networks by automatin…
Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access…
About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging…
Est. 124,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 160,000 USD
Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, a…
Est. 171,850 USD
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by mor…
Est. 165,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border paymen…
Est. 120,000 EUR
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…
About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter f…
Est. 177,500 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
Est. 250,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Who we are Optiver is a global market maker founded in Amsterdam, with offices in London, Chicago, Austin, New York, Sydney, Shanghai, Hong Kong, Singapore, Taipei and Mumbai. Established in 1986, today we are a leading…
Est. 650,000 DKK
Who We Are VML is a leading creative company that combines brand experience, customer experience, and commerce, creating connected brands to drive growth. VML is celebrated for its innovative and award-winning human-firs…
Est. 144,000 USD
About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging…
Est. 125,000 USD
Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, a…
Est. 140,000 USD
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civi…
Est. 140,000 USD
The Nuclear Company is the fastest growing AI tech-enabled startup in the nuclear and energy space, pioneering a fleet-scale approach to building the next generation of nuclear reactors. Through our design-once, build-ma…
Est. 120,000 EUR
We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis. Our team has unique expertise in research, analysis, and product development. By…