---
title: 'Information Security Engineer | GRC at ARQ'
canonical: 'https://feeny.ai/job/information-security-engineer-grc-arq-bogota-9rrsv74edmzh'
type: 'job'
last_seen: '2026-11-06'
---

# Information Security Engineer | GRC at ARQ

- **Company:** ARQ
- **Location:** Bogota, Colombia
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-30
- **Last confirmed live:** 2026-11-06
- **Apply:** https://jobs.ashbyhq.com/arq/8c65ba98-0c57-4cbc-b5d5-7258308d0342

## Job description

## What we're looking for

You'll help shape how ARQ manages security governance, risk and compliance across the group. Based in Colombia, you'll work directly with our group CISO and a global security team, owning programmes that support our growth across multiple markets. We're looking for someone who takes ownership beyond preparing for an audit. You'll turn framework requirements into practical controls, work with engineers to close gaps, and give partners, auditors and regulators a clear picture of how we manage security. You'll also help us automate repetitive work, from evidence collection and questionnaires to vendor reviews. This is an individual contributor role with broad ownership and a path towards leading GRC as the function grows.

## What you'll do

- Own and improve security compliance programmes, including SOC 2, PCI DSS readiness and GDPR-related requirements.
- Coordinate audit preparation and delivery: define scope, work with control owners, maintain evidence and drive findings through to remediation.
- Own the vendor security due diligence programme, from initial risk assessment and security reviews to ongoing monitoring and reassessment.
- Lead responses to security questionnaires, partner audits and regulatory requests, working with regional stakeholders and the group security team.
- Keep the security risk register, policies and procedures current, with clear owners and actionable remediation plans.
- Own privacy work across the group, partnering with relevant teams on data processing agreements, international transfers and breach notification requirements.
- Translate security and compliance obligations into concrete tasks for engineering and business teams.
- Help build automated workflows and AI-assisted processes that reduce repetitive GRC work while maintaining evidence quality and human oversight.

## What you'll need

- 5+ years in information security GRC, IT audit or cyber risk, including at least 2 years in financial services.
- Experience owning evidence collection and coordinating control owners through a SOC 2 or ISO 27001 audit, alongside working knowledge of PCI DSS.
- A practical understanding of GDPR, including lawful basis, data processing agreements, international transfers and breach notification.
- Experience running vendor security reviews and interpreting SOC 2 reports, including exceptions and complementary user entity controls.
- The ability to write clear policies and procedures and turn control requirements into practical actions for engineers.
- Experience working directly with auditors or regulators and managing findings through to closure.
- Spanish fluency sufficient to lead discussions with regulators and auditors, alongside professional English for working with a global team.
- The autonomy to manage priorities and drive programmes forward while working with colleagues across countries and time zones.
- Based in Colombia, preferably Bogotá, with the right to work there.

## Nice to have

- Experience within an SFC-supervised entity or a fintech undergoing SFC licensing.
- Exposure to other LatAm regulators, such as CNBV, BCRA or BCB.
- Experience implementing ISO 27001 or supporting PCI DSS assessments.
- Familiarity with GRC platforms such as Vanta, Drata or OneTrust.
- Enough AWS and cloud security knowledge to assess engineering evidence and challenge gaps.
- Experience automating GRC workflows.
- Portuguese language skills.

## Benefits

- Competitive salary and benefits
- Stock options, so you own part of what you build
- Discretionary performance bonus
- The latest tools and technology
- A world-class team that will challenge and grow your skills
- The opportunity to help build the best fintech app in Latin America
- Office Policy: 3-4 days a week in-office

## About ARQ

## Company Overview
- **One-liner**: ARQ (formerly DolarApp) is a global fintech platform that provides multi-currency accounts, real-time currency conversion, and investment access to US stocks and ETFs for individuals across the Americas.
- **Entity Type**: Private (funding stage not disclosed; raised tens of millions from top-tier investors)
- **Headquarters**: Not publicly available (serves the Americas; localized sites for Argentina and Mexico)
- **Founded**: 2021
- **Founders**: Not publicly available

## Core Business
- **Primary industry**: Fintech – cross‑border banking, payments, wealth management
- **Target customers**: B2C – travelers, investors, professionals, and global citizens in Latin America and beyond
- **Mission**: “Modern finance for the global era” – to give customers control over their money with faster, cheaper, and more transparent financial rails.

## Products & Services
- **ARQ Multi‑Currency Account**: A digital account supporting USD, EUR, and local currencies (e.g., Argentine peso, Mexican peso). Users can convert between currencies at real market rates with no hidden fees.
- **ARQ Debit Card**: A Mastercard (inferred) for spending at leading conversion rates with zero commission or hidden charges.
- **ARQ Investments**: Access to US stocks and ETFs directly from the ARQ account, enabling long‑term wealth building.
- **Payment Rails**: US and European local account details to receive and send payments globally.

## Market Standing
- **Valuation**: Not publicly available
- **Key Metric (Private)**: Total funding – “tens of millions of dollars” from renowned investors; 2 million users as of 2026-07-01
- **Notable Investors**: Sequoia Capital, Founders Fund, Brevan Howard Digital, Y Combinator, Kaszek Ventures
- **Growth Signals**: Rebranded from DolarApp to ARQ in 2024 (per Sequoia partnership date); rapid user growth (2M people); expansion across the Americas; product diversification into investing.

## Competitive Advantages
- **Transparent pricing**: Real market conversion rates, no hidden fees – a stark contrast to traditional banks
- **Global accounts**: Users get US and EU bank details and a debit card usable worldwide
- **World‑class backing**: Sequoia, Founders Fund, YC, etc. provide credibility and strategic support
- **Elite team**: Small, high‑caliber team with experience at Revolut, Uber, Amazon, Block, and UBS, enabling fast execution
- **Vertical integration**: Combining payments, currency exchange, and investing in one app

## Strategic Focus
- **Build the financial system of the next century** – replace legacy banking middleware with direct, customer‑owned rails
- **Scale across the Americas** – starting in Argentina and Mexico, then expanding to other markets
- **Deepen wealth management** – add more asset classes and long‑term savings tools
- **Maintain a lean, high‑impact team** – “small teams with the best talent outcompete massive companies”

## Why Work Here
- **Culture**: “Long‑term ambition and absolute conviction”; “nimble, but ambitious” – the careers page describes a mission‑driven, execution‑focused environment
- **Team & autonomy**: Small teams own meaningful product areas; high ownership and rapid iteration
- **Remote/office**: Not explicitly stated, but likely hybrid or remote‑friendly given the global nature of the business
- **Notable**: Founders and early employees have built profitable products at iconic companies; strong emphasis on “world‑class in everything we do”
- **Perks**: Not publicly disclosed, but likely competitive compensation and equity in a high‑growth fintech

## Sources
1. [arqfinance.com](https://www.arqfinance.com/en-AR)
2. [jobs.ashbyhq.com/arq](https://jobs.ashbyhq.com/arq)
3. [sequoiacap.com/companies/arq/](https://sequoiacap.com/companies/arq/)
4. [arqfinance.com/en-AR/careers](https://www.arqfinance.com/en-AR/careers)

## Other roles at ARQ

- [Customer Support Specialist](https://feeny.ai/job/customer-support-specialist-arq-sao-paulo-nd6xmzs83g58) — São Paulo, Brazil
- [Technical Recruiter](https://feeny.ai/job/technical-recruiter-arq-sao-paulo-py83nnh2pm9j) — São Paulo, Brazil
- [Recruiter](https://feeny.ai/job/recruiter-arq-new-york-d798cj0025fy) — New York, NY
- [Finance Analytics Engineer | FP&A](https://feeny.ai/job/finance-analytics-engineer-fp-a-arq-london-rr9deqqnvn5n) — London, United Kingdom
- [Financial Controller &  Regulatory Reporting Officer – Gibraltar](https://feeny.ai/job/financial-controller-regulatory-reporting-officer-gibraltar-arq-gibraltar-m15gzj62zh95) — Gibraltar, United Kingdom
- [Legal Counsel - US](https://feeny.ai/job/legal-counsel-us-arq-new-york-me6g11v3zbv4) — New York, NY
- [Senior Detection Engineer | SecOps](https://feeny.ai/job/senior-detection-engineer-secops-arq-london-y4www8m08z9f) — London, United Kingdom
- [Fincrime Compliance Manager](https://feeny.ai/job/fincrime-compliance-manager-arq-new-york-b25gryekeh00) — New York, NY
- [Brokerage and RIA CCO](https://feeny.ai/job/brokerage-and-ria-cco-arq-new-york-06mqqqs0mfz4) — New York, NY
- [Lead Software Engineer(Java)](https://feeny.ai/job/lead-software-engineer-java-arq-london-vxx9v2k2nqv7) — London, United Kingdom