Cybersecurity and Data privacy Engineer - RegTech

Job Description:

• As a Cybersecurity and Data Privacy Engineer, you will help design and validate security and privacy controls for a cloud-native enterprise platform that supports regulated business workflows
• You will collaborate with architects, DevOps engineering, product, and QA teams to embed security access control, privacy, and client trust requirements into the platform from the very beginning

Key Responsibilities:

• Define and assess security requirements spanning authentication, authorization, RBAC, tenant isolation, encryption, secrets management, API security, and secure deployment
• Design and validate data privacy controls for sensitive data, including PII handling, retention, masking, deletion, access logging, and secure data movement
• Assist with threat modeling, secure architecture reviews, security test planning, vulnerability management, and remediation tracking
• Partner with DevOps teams to implement security controls for cloud configuration, including Key Vault, managed identities, private networking, security monitoring, and policy guardrails
• Review application security patterns such as input validation, access control, session handling, secure logging, audit events, and data leakage prevention
• Support readiness for external certifications and client security assessments, including SOC 2, ISO 27001, ISO 27701, ISO 42001, SOC 1, and CSA STAR where applicable
• Develop security documentation artifacts, including control mappings, privacy impact inputs, security questionnaires, and audit evidence
• Work alongside AI engineers to establish AI usage controls, prompt data privacy rules, AI output logging, and responsible AI guardrails

Technical Requirements:

• Minimum 7 years of experience in cybersecurity application security, cloud security, data privacy security engineering, or risk control roles
• Strong understanding of IAM, RBAC, encryption, secrets management, API security, secure SDLC, vulnerability management, and cloud security controls
• Experience with Azure or other cloud security services, including identity, Key Vault, logging, monitoring, private networking, and security posture management
• Knowledge of privacy principles, including PII handling, minimization, retention, masking, access control, and data transfer controls
• Experience conducting or supporting security reviews, threat modeling, penetration testing, remediation vulnerability triage, and control validation
• Ability to collaborate with engineering teams to translate security requirements into actionable implementation guidance
• Strong documentation capabilities for security controls, risks, remediation plans, and audit/client review evidence

Preferred Skills:

Foundational->Cybersecurity Competency Development->Cyber Workforce Skill Development & Position Qualification Standards,Foundational ->Data privacy->Privacy by design,Technology->Application Security->SAST, IAST/RASP, SCA, CNAPP,Technology->Cloud->AWS - Security