Cybersecurity and Data privacy Engineer - RegTech

• Establish, assess, and refine security requirements spanning authentication, authorization, RBAC, tenant isolation, encryption, secrets management, API security, and secure deployment.
• Design and validate data privacy safeguards for sensitive data, including PII handling, retention, masking, deletion, access logging, and secure data movement.
• Provide support for threat modeling, security architecture reviews, security testing strategy planning, vulnerability management, and remediation tracking.
• Partner with DevOps teams to implement security controls for cloud configuration, Key Vault, managed identities, private networking, security monitoring, and policy guardrails.
• Evaluate application security practices such as input validation, access control, session handling, secure logging, audit event design, and prevention of data leakage.
• Assist with preparation for external certifications and customer security assessments, including SOC 2, ISO 27001, ISO 27701, ISO 42001, SOC 1, and CSA STAR where applicable.
• Develop and maintain security documentation, control mappings, privacy impact inputs, security questionnaires, and audit evidence.
• Collaborate with AI engineers to define AI usage controls, prompt and data privacy rules, AI output logging, and responsible AI guardrails.

Technical and Professional Requirements:

• Minimum 7 years of experience in cybersecurity, application security, cloud security, data privacy, security engineering or risk/control roles.
• Strong understanding of IAM, RBAC, encryption, secrets management, API security, secure SDLC, vulnerability management and cloud security controls.
• Experience with Azure or other cloud security services, including identity, Key Vault, logging, monitoring, private networking and security posture management.
• Understanding of privacy principles including PII handling, minimization, retention, masking, access control and data transfer controls.
• Experience conducting or supporting security reviews, threat modeling, penetration test remediation, vulnerability triage and control validation.
• Ability to work with engineering teams to convert security requirements into practical implementation guidance.
• Strong documentation skills for security controls, risks, remediation plans and audit/client-review evidence.

Preferred Skills:

Technology->Application Security->SAST

IAST/RASP

SCA

CNAPP

Technology->Cloud->AWS - Security

Foundational->Cybersecurity Competency Development->Cyber Workforce Skill Development & Position Qualification Standards

Foundational ->Data privacy->Privacy by design

Educational Requirements: Bachelor of Engineering,Master Of Engineering