Responsibilities

CNBC World's Top Fintech Companies (2026)
FXC Intelligence Top 100 Cross-border Payment Companies (2026)
Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025)
LinkedIn as one of the Top 20 Startups in the UK (2025)
Systematic Risk Reduction: Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools.
Cross-System Access Automation: Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems that may utilise independent user management interfaces.
Bug Bounty Programme Management: Implement, manage, and scale the company's external bug bounty programme. Act as the primary internal interface to validate crowdsourced findings and track them through to successful remediation.
Regulatory Control Engineering (AI Act, DORA, MiCA, etc.): Lead the technical risk mapping and operational governance for the applicable regulations. Maintain consistent control alignment with the Digital Operational Resilience Act (DORA), MiCA, AI Act, GDPR, AML regulations, and global operational resilience principles by integrating Vanta with other tools and processes.
Policy & Control Governance: Formulate, publish, and maintain information security and operational risk policies that reflect corporate security objectives while integrating newly identified risk vectors, focusing on technical governance for AI and newly emerging threats.
GRC Platform Optimisation: Administer and optimise automated compliance platforms to manage the internal risk register, monitor control effectiveness, and drive hands-free audit evidence gathering by integrating and extending the capabilities of AI and other technical tools.
Project Management: Autonomously lead technical GRC initiatives from scoping through to execution, managing timelines, tracking resource dependencies, and coordinating across cross-functional infrastructure teams.
Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.

Security Operations & Risk Automation Engineer at Bvnk · LumiJobs

Security Operations & Risk Automation Engineer

Responsibilities

Qualification

Required

Company

Bvnk

More roles at Bvnk