Qlub Cyber Security Engineer at Qlub responsible for day-to-day security compliance and customer assurance. The role includes managing audits, certifications, and supporting security assessments across multiple standards.
Responsibilities
As qlub expands across markets, so do our security challenges. From protecting our payments platform to meeting regulatory requirements and earning customer trust, security plays a critical role in how we grow. We are looking for a Cybersecurity Engineer to own our day-to-day security compliance and customer assurance including maintaining security standards and certifications, managing audits and supporting customer security assessments.
This isn't a role limited to compliance checklists. You'll be part of our security team, working closely with engineering and teams across the business. You'll also have opportunities to contribute to threat detection, application security, cloud security and penetration testing. You'll have the freedom to solve real problems and make a visible impact on how we secure our platform.
Things move quickly here and not every challenge comes with a playbook. What matters is strong security fundamentals, curiosity, adaptability and the ability to figure things out and get things done.
Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
Coordinate third-party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.
Contribute to security operations including SIEM/EDR monitoring, threat detection, incident investigations, cloud security and vulnerability management.
Support application security and DevSecOps initiatives including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA and vulnerability validation.
Leverage automation and AI to streamline security assessments, compliance activities and operational workflows.
Qualification
You take initiativeYou are curiousYou communicate clearlyWorking knowledge of PCI DSSStrong analyticalExperience in fintechFamiliarity with UAE IA/NESAPractical experience conducting web
Required
You take initiative, exercise sound judgement and drive work forward independently.
You are curious, resourceful and quick to learn unfamiliar tools, technologies and frameworks.
You communicate clearly, collaborate across teams and stay effective when priorities change.
You actively embrace AI to solve problems, automate repetitive work and find smarter ways to get things done.
Bachelor’s degree in Information Security, Computer Science or a related field.
3+ years of hands-on experience in cybersecurity or information security, including security compliance, assurance or GRC.
Hands-on experience maintaining an ISO 27001 ISMS, coordinating audits, validating controls and managing compliance evidence.
Experience handling customer security questionnaires, due diligence assessments and working with auditors and cross-functional teams.
Working knowledge of PCI DSS, security risk management and frameworks such as NIST CSF.
Solid technical foundations in cloud and SaaS architectures, networking, identity and access management and web security including OWASP Top 10.
Strong analytical, problem-solving and communication skills with fluency in English.
Familiarity with AI-assisted tools for research, analysis and automation with the judgment to validate outputs and handle sensitive information responsibly.
Preferred
Experience in fintech, payments or cloud-based SaaS environments.
Familiarity with UAE IA/NESA, SOC 2 or GDPR requirements.
Experience with GRC platforms and security workflow automation.
Hands-on experience with cloud security (AWS/GCP), SIEM/EDR platforms such as CrowdStrike/Splunk or detection engineering.
Practical experience conducting web, API or mobile penetration testing.
Relevant certifications such as ISO 27001 Lead Auditor, CISA, eWPTx or OSCP are valued.
