Security Operations & Risk Automation Engineer (Fintech)

Location: South Africa or Bulgaria; hybrid/remote working policy.

Salary: €55,000–€80,000 EUR annually in Bulgaria.

Company

hirify.global provides stablecoin and fiat financial infrastructure for enterprises and is part of Mastercard, enabling money movement across more than 130 countries.

What you will do

• Design, build, and deploy automated workflows to identify, map, and mitigate security risks across separate business environments and bespoke tools.
• Automate and coordinate user access reviews across disconnected internal and external systems.
• Implement, manage, and scale the external bug bounty programme, validating findings and tracking remediation.
• Engineer technical controls and risk mappings for DORA, MiCA, the EU AI Act, GDPR, AML regulations, and operational resilience principles.
• Maintain security and operational risk policies, including governance for AI and emerging threats.
• Optimise GRC platforms, automate audit evidence gathering, and lead technical GRC projects from scoping through execution.

Requirements

• Bachelor’s degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
• 2–4 years of experience in technical GRC, IT audit, operational risk management, or automation-focused information security or compliance.
• Strong analytical ability to identify and mitigate operational vulnerabilities in customised environments, third-party integrations, and decentralised access registers.
• Direct experience managing controls aligned with financial and cybersecurity frameworks, including AML, MiCA, and DORA.
• Ability to translate regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, including AI-based technical tools.
• Conceptual understanding of AWS, Docker, microservices architecture, and API ecosystems.
• Ability to author clear, executive-ready information security policies connecting engineering workflows with financial-grade compliance obligations.

Nice to have

• Exposure to managing or triaging a bug bounty platform such as HackerOne or Bugcrowd, or working with external application security researchers.
• Practical familiarity with Vanta or an equivalent automated compliance or GRC platform.

Culture & Benefits

• Flexible working hours with hybrid working at the core of the policy.
• Flexible holiday arrangements.
• Growth-minded, open, and creative working environment.
• Opportunities to travel to offices around the world.
• Competitive salary based on experience and relevant certifications.