We’re looking for Lead Security & Compliance Engineer to drive and lead our information security, risk management, and compliance efforts. This is a highly cross-functional role requiring strong technical knowledge, regulatory awareness, leadership skills, and customer-facing experience. If you’re proactive, pragmatic, and capable of influencing engineers and teams through dotted-line relationships, this role is tailored for you!
In this role you will:
- Lead the design, implementation, and continuous improvement of the company’s information security and compliance programs
- Maintain and manage the company’s annual SOC 2 Type II audit lifecycle; prepare for potential future audits such as ISO 27001
- Define and maintain information security policies, standards, and practices across the organization
- Act as the security and compliance subject matter expert in pre-sales and customer discussions, helping to build trust and influence client decisions
- Partner closely with product, engineering, support, and sales teams to integrate secure development and operational practices
- Identify security risks, drive remediation efforts, and maintain a comprehensive risk management program
- Evaluate, implement, and manage security tools and processes, ensuring alignment with business objectives and compliance requirements
- Report on security posture, metrics, and audit readiness to executive leadership and customers
- Coordinate and influence engineers and other staff across business units to achieve compliance and security objectives, despite not having direct reporting lines
Your profile:
- 7+ years of experience in information security, with a strong focus on compliance and risk management in the technology or fintech sectors
- Proven experience leading security programs and compliance efforts (e.g., SOC 2, ISO 27001, GDPR, etc.);
- Strong technical understanding of modern software development practices, DevOps, cloud infrastructure (e.g., AWS, Azure), and SaaS operations
- Exceptional written and verbal communication skills, with the ability to convey complex security topics to non-technical stakeholders and influence sales outcomes;
- Experience engaging with external auditors, regulators, and enterprise customers
- Comfortable working independently in a fast-paced, resource-constrained environment
- Adept at building cross-functional relationships and leading through influence
- Familiarity with security tools such as identity and access management, vulnerability scanners, endpoint protection, and secure SDLC processes
We offer:
- Market-leading salary
- The freedom to work from home or the office
- Performance bonuses
- 25 days off with up to 8 extra bonus days paid annual holiday
- Premium healthcare and dental package
- Co-founded Multisport card
- Food vouchers
- Access to an employee Well-being program
- Long-term employee value distribution scheme (LEVD)
- Modern office space at Campus X, recreation zones, and a spacious rooftop terrace
- Generous refer-a-friend program
- Experienced, skilled and friendly teammates
About interop.io
interop.io is a software infrastructure company delivering technology solutions to some of the largest financial institutions in the world.
interop.io was formed in June 2023 through the merger of Finsemble and Glue42 to create a global powerhouse driving application interoperability in capital markets and beyond. interop.io brings together the award-winning technologies of both companies to offer a suite desktop and browser products.
At the core is io.Connect, which enables clients to build and deploy highly intuitive front ends that bring different applications and functionality into a single, harmonized smart desktop. In this way, the boundaries between different applications are dissolved, and users are free to focus on higher-value tasks.
The company employs over 120 people, including R&D and implementation engineers located in New York, Charlottesville, London, and Sofia.
