Security Engineer

Flexifai is an AI-driven payment platform (PSP) serving both high-risk and traditional industries. We process millions of transactions through 80+ payment methods, including cryptocurrency, across Africa, Europe, and LATAM. Our platform is built on a scalable microservices architecture with a strong focus on security, automation, and high availability.

Our team of 80+ professionals works in a hybrid format from offices in Kyiv, Lisbon, Limassol, and London, as well as remotely across the globe.

What you’ll be responsible for:

• Developing, implementing, and maintaining information security policies.
• Building and developing an ISMS in accordance with ISO/IEC 27001.
• Preparing the company for PCI DSS certifications and audits.
• Working with external auditors (QSAs) and overseeing compliance with requirements.
• Managing access controls (IAM) and conducting regular Access Reviews.
• Coordinating penetration testing and vulnerability management.
• Establishing and maintaining Incident Response processes.
• Managing security risks and supporting internal audits.
• Participating in security due diligence for partners and clients.
• Partially administering corporate SaaS services and security tools.

Required Skills:

• 5+ years of experience in Information Security.
• At least 2 years of experience in fintech, banking, PSP, or payment processing.
• Hands-on experience with PCI DSS audits.
• Experience building or maintaining an ISMS in accordance with ISO/IEC 27001.
• Good understanding of IAM, Access Management, and modern security practices.
• English — Upper-Intermediate (B2+) or higher.
• Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor will be a strong advantage.

Nice to have:

• PCIP or ISA.
• CISA, CRISC, or CCSP.
• Experience with SOC 2 Type II audits.
• Practical experience with DORA, GDPR, or NIS2.
• Understanding of PSD2, SCA, and the European payment ecosystem.

What we offer:

• An opportunity to work in a growing international fintech company.
• The chance to have a real impact on building security processes practically from scratch.
• Exposure to international security standards and compliance frameworks.
• Remote work.
• Competitive compensation.
• A strong team of technical specialists with minimal bureaucracy.
• A real opportunity to influence the development of both the product and the company’s security.

Відгукнутись на вакансію