Cybersecurity and Data privacy Engineer - RegTech

Job Description: As a Cybersecurity and Data Privacy Engineer you will help design and validate security and privacy controls for a cloud native enterprise platform used in regulated business workflows You will work with architects DevOps engineering product and QA teams to build security access control privacy and client trust requirements into the platform from the start Key Responsibilities: Define and review security requirements across authentication authorization RBAC tenant isolation encryption secrets management API security and secure deployment Design and validate data privacy controls for sensitive data PII handling retention masking deletion access logging and secure data movement Support threat modeling secure architecture review security test planning vulnerability management and remediation tracking Work with DevOps teams to implement security controls around cloud configuration Key Vault managed identities private networking security monitoring and policy guardrails Review application security patterns including input validation access control session handling secure logging audit events and data leakage prevention Support readiness for external certifications and client security reviews such as SOC 2 ISO 27001 ISO 27701 ISO 42001 SOC 1 and CSA STAR where applicable Contribute to security documentation control mappings privacy impact inputs security questionnaires and audit evidence Partner with AI engineers to design AI usage controls prompt data privacy rules AI output logging and responsible AI guardrails Technical Requirements: Minimum 7 years of experience in cybersecurity application security cloud security data privacy security engineering or risk control roles Strong understanding of IAM RBAC encryption secrets management API security secure SDLC vulnerability management and cloud security controls Experience with Azure or other cloud security services including identity Key Vault logging monitoring private networking and security posture management Understanding of privacy principles including PII handling minimization retention masking access control and data transfer controls Experience conducting or supporting security reviews threat modeling penetration test remediation vulnerability triage and control validation Ability to work with engineering teams to convert security requirements into practical implementation guidance Strong documentation skills for security controls risks remediation plans and audit client review evidence Preferred Skills: Foundational->Cybersecurity Competency Development->Cyber Workforce Skill Development & Position Qualification Standards,Foundational ->Data privacy->Privacy by design,Technology->Application Security->Application Security - ALL,Technology->Infrastructure Security->Cloud Security .