Cyber Security Engineer

This is a fully remote position, open to applicants in Pakistan.

📋 Description

• Take charge of daily security compliance and ISMS activities related to ISO 27001, PCI DSS, SOC 2 readiness, and other relevant regulatory requirements.

• Oversee the complete process of internal and external audits, certifications, and assessments, which includes engaging with auditors, validating evidence, and ensuring the closure of corrective actions.

• Manage customer security questionnaires, due diligence processes, and security assessments by collaborating directly with business stakeholders and customer security teams.

• Update and maintain security policies, conduct risk assessments, and control documentation, evaluate control effectiveness, and ensure compliance findings are resolved.

• Organize third-party security reviews, assist in data protection and security awareness initiatives, and ensure ongoing compliance monitoring.

• Contribute to security operations encompassing SIEM/EDR monitoring, threat detection, incident investigations, cloud security, and vulnerability management.

• Assist with application security and DevSecOps initiatives, including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA, and vulnerability validation.

• Utilize automation and AI to enhance security assessments, compliance activities, and operational workflows.

• Collaborate closely with engineering and other teams throughout the organization to secure qlub’s payments platform.

⛳️ Requirements

• A Bachelor's degree in Information Security, Computer Science, or a related discipline.

• A minimum of 3 years of practical experience in cybersecurity or information security, particularly in security compliance, assurance, or GRC.

• Direct experience in maintaining an ISO 27001 ISMS, coordinating audits, validating controls, and managing compliance documentation.

• Proven experience in handling customer security questionnaires, conducting due diligence assessments, and collaborating with auditors and cross-functional teams.

• Familiarity with PCI DSS, security risk management, and frameworks such as NIST CSF.

• Strong technical knowledge of cloud and SaaS architectures, networking, identity and access management, and web security, including OWASP Top 10.

• Excellent analytical, problem-solving, and communication abilities, with fluency in English.

• Knowledge of AI-assisted tools for research, analysis, and automation, along with the discretion to validate outputs and manage sensitive information responsibly.

• Experience in fintech, payments, or cloud-based SaaS environments.

• Understanding of UAE IA/NESA, SOC 2, or GDPR requirements.

• Familiarity with GRC platforms and security workflow automation.

• Hands-on experience with cloud security (AWS/GCP), and SIEM/EDR platforms such as CrowdStrike/Splunk or detection engineering.

• Practical experience in conducting web, API, or mobile penetration testing.

• Relevant certifications like ISO 27001 Lead Auditor, CISA, eWPTx, or OSCP are highly regarded.

🏝️ Benefits

• Genuine ownership of products that influence millions of diners and thousands of restaurants worldwide.

• The chance to tackle challenging issues in payments, hospitality, and customer experience.

• A dynamic environment where innovative ideas are rapidly implemented.

• Close collaboration with seasoned operators, builders, and industry experts.

• An opportunity to make a noticeable impact in one of the fastest-growing restaurant technology firms globally.