Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days agoWe saw it 75 min after it went up

Security Operations & Risk Automation Engineer

BVNK29 open roles

Pay
€55,000 – €80,000 a year
Where
South Africa, Bulgaria
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Operations & Risk Automation EngineerBVNK · South Africa, Bulgaria

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on BVNK's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.3% of postings close within 7 days. Measured by our own scanner across the market. BVNK postings stay open a median of 37 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.3%7 days
  4. 17.6%14 days
  5. 34.3%30 days
  6. 43.5%60 days
This job: posted 2 days ago

BVNK median: 37 days open

The posting

About us:

BVNK is the stablecoin-powered financial stack for enterprises. We're now part of Mastercard, and together we're building a network for every form of money – one that delivers more reach, more capability and more choice.

We enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries, with 40+ licenses for fiat and digital assets globally. Processing billions annually, we empower enterprises worldwide to send, receive, convert, and settle stablecoins and fiat seamlessly through a single integration.

Our mission is to accelerate global money movement, and we're assembling a world-class team to make it happen.

Trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire, we deliver the infrastructure that makes new forms of money usable within the financial systems customers already rely on today.

By combining Mastercard's global payment reach and trusted networks with BVNK's stablecoin infrastructure, we're building the trusted operating layer for the evolution of money movement, helping customers participate in emerging digital networks without having to rebuild their businesses around every new innovation.

We're a diverse team spread across EMEA, North America, and APAC, with a shared belief that stablecoins are the new infrastructure layer for financial services, and that BVNK is at the forefront of this shift.

We're incredibly honored to have been recognized by:

  • CNBC World's Top Fintech Companies (2026)
  • FXC Intelligence Top 100 Cross-border Payment Companies (2026)
  • Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025)
  • LinkedIn as one of the Top 20 Startups in the UK (2025)

Location: We offer a Hybrid/Remote working policy.

FUNCTION: Engineering

We are seeking an experienced Security Operations & Risk Automation Engineer to join our Information Security team.

The Security Operations & Risk Automation Engineer at BVNK plays a pivotal role in fortifying, enhancing, and scaling our information security function. This role focuses on leveraging cutting-edge automation technologies to reduce systemic risk by continuously discovering technical, procedural, and workflow vulnerabilities, automating user access reviews, and enforcing compliance guardrails across disparate, decentralized environments.

The ideal candidate is a technical security or risk professional who designs automated processes to monitor custom tools and decentralized systems, significantly lowering the company risk footprint. Additionally, this position will establish and govern BVNK’s bug bounty programme, translating external vulnerability findings into internal security policy improvements while leading the engineering of the automated controls required to satisfy regulatory frameworks such as the EU AI Act, DORA, AML, MiCA, and others.

The Security Operations & Risk Automation Engineer will work closely with the Information Security Architect and the Information Security GRC (Governance, Risk and Compliance) expert to define and implement risk mitigations based on assessments, audits, and regulatory frameworks.

Key Areas of Responsibilities:

  • Systematic Risk Reduction: Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools.
  • Cross-System Access Automation: Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems that may utilise independent user management interfaces.
  • Bug Bounty Programme Management: Implement, manage, and scale the company's external bug bounty programme. Act as the primary internal interface to validate crowdsourced findings and track them through to successful remediation.
  • Regulatory Control Engineering (AI Act, DORA, MiCA, etc.): Lead the technical risk mapping and operational governance for the applicable regulations. Maintain consistent control alignment with the Digital Operational Resilience Act (DORA), MiCA, AI Act, GDPR, AML regulations, and global operational resilience principles by integrating Vanta with other tools and processes.
  • Policy & Control Governance: Formulate, publish, and maintain information security and operational risk policies that reflect corporate security objectives while integrating newly identified risk vectors, focusing on technical governance for AI and newly emerging threats.
  • GRC Platform Optimisation: Administer and optimise automated compliance platforms to manage the internal risk register, monitor control effectiveness, and drive hands-free audit evidence gathering by integrating and extending the capabilities of AI and other technical tools.
  • Project Management: Autonomously lead technical GRC initiatives from scoping through to execution, managing timelines, tracking resource dependencies, and coordinating across cross-functional infrastructure teams.

What we need from you:

  • Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
  • 2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role.
  • Vulnerability Program Exposure: Prior exposure to managing or triage coordination for a bug bounty platform (e.g., HackerOne, Bugcrowd) or working closely with external application security researchers is a strong plus.
  • Platform Experience: Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms is a plus.
  • Risk Identification & Mitigation: Exceptional analytical capabilities to isolate operational vulnerabilities within heavily customised environments, third-party software integrations, and decentralized access registers.
  • Regulated Fintech Exposure: Direct experience managing controls aligned with financial and cybersecurity frameworks, specifically including AML rules, MiCA guidelines, and DORA requirements.
  • Technical Scaffolding & Automation: Skill in translating text-heavy regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, implementing AI and other technical tools at scale.
  • Architectural Literacy: Strong conceptual understanding of modern infrastructure components—such as Amazon AWS, containers (Docker), microservices architecture, and API ecosystems—enabling effective risk oversight in highly technical environments.
  • Policy Crafting: Proven ability to author clear, executive-ready information security policies that bridge engineering workflows with financial-grade compliance obligations.

What you can expect from us:

  • Fair and competitive salary at every stage of your growth
  • Flexible working hours, with hybrid working at its heart
  • A culture built on passionate, growth-minded people
  • A flexible approach to holiday
  • Opportunities to travel to our offices around the world
  • An open and creative environment where you can help us define the future of BVNK, its culture, and its opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. You may be a great fit for this role or another role in our team.

Compensation packages are based on candidate experience and relevant certifications.

Bulgaria Salary Range

€55.000—€80.000 EUR

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against BVNK's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on BVNK's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    BVNK's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.