---
title: 'Security Operations & Risk Automation Engineer at BVNK'
canonical: 'https://feeny.ai/job/security-operations-risk-automation-engineer-bvnk-south-africa-p1pm7vgpy8gg'
type: 'job'
last_seen: '2026-10-20'
---

# Security Operations & Risk Automation Engineer at BVNK

- **Company:** BVNK
- **Location:** South Africa, Bulgaria
- **Compensation:** €55k–€80k
- **Work type:** remote
- **Posted:** 2026-10-20
- **Last confirmed live:** 2026-10-20
- **Apply:** https://job-boards.eu.greenhouse.io/bvnk/jobs/5010660101

## Job description

About us:

BVNK is the stablecoin-powered financial stack for enterprises. We're now part of Mastercard, and together we're building a network for every form of money – one that delivers more reach, more capability and more choice.

We enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries, with 40+ licenses for fiat and digital assets globally. Processing billions annually, we empower enterprises worldwide to send, receive, convert, and settle stablecoins and fiat seamlessly through a single integration.

Our mission is to accelerate global money movement, and we're assembling a world-class team to make it happen.

Trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire, we deliver the infrastructure that makes new forms of money usable within the financial systems customers already rely on today.

By combining Mastercard's global payment reach and trusted networks with BVNK's stablecoin infrastructure, we're building the trusted operating layer for the evolution of money movement, helping customers participate in emerging digital networks without having to rebuild their businesses around every new innovation.

We're a diverse team spread across EMEA, North America, and APAC, with a shared belief that stablecoins are the new infrastructure layer for financial services, and that BVNK is at the forefront of this shift.

We're incredibly honored to have been recognized by:

- CNBC World's Top Fintech Companies (2026)
- FXC Intelligence Top 100 Cross-border Payment Companies (2026)
- Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025)
- LinkedIn as one of the Top 20 Startups in the UK (2025)

Location: We offer a Hybrid/Remote working policy.

FUNCTION: Engineering

We are seeking an experienced Security Operations & Risk Automation Engineer to join our Information Security team.

The Security Operations & Risk Automation Engineer at BVNK plays a pivotal role in fortifying, enhancing, and scaling our information security function. This role focuses on leveraging cutting-edge automation technologies to reduce systemic risk by continuously discovering technical, procedural, and workflow vulnerabilities, automating user access reviews, and enforcing compliance guardrails across disparate, decentralized environments.

The ideal candidate is a technical security or risk professional who designs automated processes to monitor custom tools and decentralized systems, significantly lowering the company risk footprint. Additionally, this position will establish and govern BVNK’s bug bounty programme, translating external vulnerability findings into internal security policy improvements while leading the engineering of the automated controls required to satisfy regulatory frameworks such as the EU AI Act, DORA, AML, MiCA, and others.

The Security Operations & Risk Automation Engineer will work closely with the Information Security Architect and the Information Security GRC (Governance, Risk and Compliance) expert to define and implement risk mitigations based on assessments, audits, and regulatory frameworks.

Key Areas of Responsibilities:

- Systematic Risk Reduction: Design, build, and deploy automated workflows to continuously identify, discover, map, and mitigate security risks across separate business environments and bespoke tools.
- Cross-System Access Automation: Programmatically orchestrate and streamline complex user access reviews across disconnected internal and external systems that may utilise independent user management interfaces.
- Bug Bounty Programme Management: Implement, manage, and scale the company's external bug bounty programme. Act as the primary internal interface to validate crowdsourced findings and track them through to successful remediation.
- Regulatory Control Engineering (AI Act, DORA, MiCA, etc.): Lead the technical risk mapping and operational governance for the applicable regulations. Maintain consistent control alignment with the Digital Operational Resilience Act (DORA), MiCA, AI Act, GDPR, AML regulations, and global operational resilience principles by integrating Vanta with other tools and processes.
- Policy & Control Governance: Formulate, publish, and maintain information security and operational risk policies that reflect corporate security objectives while integrating newly identified risk vectors, focusing on technical governance for AI and newly emerging threats.
- GRC Platform Optimisation: Administer and optimise automated compliance platforms to manage the internal risk register, monitor control effectiveness, and drive hands-free audit evidence gathering by integrating and extending the capabilities of AI and other technical tools.
- Project Management: Autonomously lead technical GRC initiatives from scoping through to execution, managing timelines, tracking resource dependencies, and coordinating across cross-functional infrastructure teams.

What we need from you:

- Bachelor's degree in Information Security, Computer Science, IT Audit, Risk Management, or equivalent practical experience.
- 2–4 years of experience in technical GRC, IT Audit, Operational Risk Management, or an automation-focused information security or compliance role.
- Vulnerability Program Exposure: Prior exposure to managing or triage coordination for a bug bounty platform (e.g., HackerOne, Bugcrowd) or working closely with external application security researchers is a strong plus.
- Platform Experience: Practical familiarity operating automated compliance software like Vanta or equivalent GRC platforms is a plus.
- Risk Identification & Mitigation: Exceptional analytical capabilities to isolate operational vulnerabilities within heavily customised environments, third-party software integrations, and decentralized access registers.
- Regulated Fintech Exposure: Direct experience managing controls aligned with financial and cybersecurity frameworks, specifically including AML rules, MiCA guidelines, and DORA requirements.
- Technical Scaffolding & Automation: Skill in translating text-heavy regulatory mandates and manual review processes into programmatic triggers and automated detection mechanisms, implementing AI and other technical tools at scale.
- Architectural Literacy: Strong conceptual understanding of modern infrastructure components—such as Amazon AWS, containers (Docker), microservices architecture, and API ecosystems—enabling effective risk oversight in highly technical environments.
- Policy Crafting: Proven ability to author clear, executive-ready information security policies that bridge engineering workflows with financial-grade compliance obligations.

What you can expect from us:

- Fair and competitive salary at every stage of your growth
- Flexible working hours, with hybrid working at its heart
- A culture built on passionate, growth-minded people
- A flexible approach to holiday
- Opportunities to travel to our offices around the world
- An open and creative environment where you can help us define the future of BVNK, its culture, and its opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. You may be a great fit for this role or another role in our team. Compensation packages are based on candidate experience and relevant certifications.

Bulgaria Salary Range €55.000—€80.000 EUR

## About BVNK

## Company Overview
- **One-liner**: BVNK delivers enterprise-grade stablecoin payments infrastructure, unifying banks and blockchains in a single platform to accelerate global money movement.
- **Entity Type**: Private (Series B, $50M round led by Haun Ventures, Coinbase Ventures, Scribble, and Tiger Global)
- **Headquarters**: London, United Kingdom (with offices in the US, Europe, and Africa)
- **Founded**: 2021
- **Founders**: Jesse Hemson-Struthers (CEO) and an unnamed co-founder/CTO

## Core Business
- **Primary industry**: Fintech / Payments Infrastructure (stablecoin and fiat payments)
- **Target customers**: B2B – fintechs, enterprise platforms, PSPs, and global businesses needing multi-rail payment solutions (e.g., Worldpay, Deel, LianLian Global, Rapyd)
- **Mission or purpose statement**: "Accelerate global money movement" by enabling seamless operation across fiat and blockchain payments.

## Products & Services
- **Layer1 Infrastructure**: Core API and custody layer for managing stablecoin payments, wallets, and liquidity in-house. Includes fiat-to-crypto conversion, on/off-ramp, and multi-rail orchestration (ACH, SEPA, Fedwire, SWIFT).
- **Managed Payments (Turnkey)**: A fully managed solution that leverages BVNK’s licensing, custody, and compliance framework to launch stablecoin payments quickly without building in-house.
- **Virtual Accounts**: Automated account management for sending, receiving, and converting stablecoins and fiat across 25+ currencies.
- **Payment Orchestration**: Single platform to route payments across multiple rails (fiat, stablecoin) and automate reconciliation, reporting, and compliance.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company)
- **Key Metric**: **$25+ billion** annualised payment volume; **$90 million** in total funding (including a $50M Series B led by Haun Ventures, Coinbase Ventures, Scribble, and Tiger Global in 2024/2025)
- **Notable Investors/Partners**: Haun Ventures, Coinbase Ventures, Tiger Global, Scribble, Mastercard, Corpay, Meow, Worldpay, Deel, LianLian Global, Rapyd
- **Growth Signals**: 300+ employees (up from 130+ in earlier reports); 25+ licenses and regulatory approvals worldwide (including MiCA licence in Europe, MSB/MTL in US, EMI licences); SOC 2 Type II and ISO 27001 certified; Newsweek Top 100 Global Most Loved Workplaces (2025, 2024, 2023); LinkedIn Top 20 Startups UK 2025; partnership with Mastercard (March 2026); secured MiCA licence (Feb 2026).

## Competitive Advantages
- **Regulatory moat**: 25+ licenses (EMI, VASP, MSB, MTL) across multiple jurisdictions, including MiCA in Europe – a major barrier to entry.
- **Compliance-first architecture**: Safeguarded customer funds, multi-layered AML systems, SOC 2 Type II, ISO 27001, and independent audits.
- **Multi-rail platform**: Unifies fiat and stablecoin payments in one API, allowing instant transfers 24/7 within the BVNK ecosystem.
- **Proven scale**: $25B+ annual volume and tier-1 enterprise customers (Worldpay, Deel, etc.) demonstrate reliability and trust.

## Strategic Focus
- **Geographic expansion**: Full US coverage, MiCA licence in Europe, and continued licensing in APAC and other regions.
- **Product depth**: Building out card issuing (VP Cards role), fraud detection, and AI-native QA automation to enhance the platform.
- **Partnerships**: Deepening relationships with Mastercard, Corpay, and other payment networks to expand stablecoin use cases.
- **Talent growth**: Scaling the engineering, compliance, and commercial teams across EMEA, North America, and APAC.

## Why Work Here
- **Culture & values**: "Move fast", "Relentlessly resourceful", "Over deliver" – a high-ownership, action-oriented environment.
- **Remote/hybrid policy**: Flexible – many roles are listed as remote (US, UK, Europe, South Africa, Bulgaria, Poland, Spain, Malta). Offices in London, New York, and Cape Town.
- **Diverse team**: Spread across UK, USA, Europe, and Africa; emphasis on inclusion and diverse backgrounds.
- **Recognition**: Newsweek Top 100 Global Most Loved Workplaces (3 years running), LinkedIn Top 20 Startups UK 2025.
- **Engineering culture**: Roles in backend, AI, QA, product design, and tech leads – strong focus on building next-gen payments infrastructure with modern tech stack.
- **Perks**: Not explicitly listed, but competitive compensation, equity, and the opportunity to shape the future of stablecoin payments at a market leader.

## Sources
1. [bvnk.com](https://bvnk.com/)
2. [bvnk.com/about-us](https://bvnk.com/about-us)
3. [bvnk.com/careers](https://bvnk.com/careers)
4. [job-boards.eu.greenhouse.io/bvnk](http://job-boards.eu.greenhouse.io/bvnk)
5. [linkedin.com/company/bvnk](https://www.linkedin.com/company/bvnk)

## Other roles at BVNK

- [Information Security Manager](https://feeny.ai/job/information-security-manager-bvnk-sao-paulo-md4w8g0c1e66) — São Paulo, Brazil
- [Solutions Engineer](https://feeny.ai/job/solutions-engineer-bvnk-united-states-jb1tbxywb8h9) — United States
- [Senior DevOps Engineer](https://feeny.ai/job/senior-devops-engineer-bvnk-south-africa-bulgaria-poland-s5sx90hm4hxp) — South Africa Bulgaria Poland, Spain
- [BSA/AML Compliance Specialist](https://feeny.ai/job/bsa-aml-compliance-specialist-bvnk-united-states-b8shp8qjjxnt) — United States
- [Senior Legal Counsel - Product & Commercial](https://feeny.ai/job/senior-legal-counsel-product-commercial-bvnk-london-6cwded7fmrbe) — London, United Kingdom / Europe
- [Compliance Senior Manager - Malta](https://feeny.ai/job/compliance-senior-manager-malta-bvnk-malta-1nz3ctv350jy) — Malta
- [Deputy MLRO (Malta)](https://feeny.ai/job/deputy-mlro-malta-bvnk-malta-e6c2ekb018rx) — Malta
- [Deputy MLRO (UK)](https://feeny.ai/job/deputy-mlro-uk-bvnk-london-48t6ap589yzz) — London, United Kingdom
- [Product Marketing Manager](https://feeny.ai/job/product-marketing-manager-bvnk-london-ky0rg42n6bkv) — London, United Kingdom / New York, NY
- [Onboarding Analyst](https://feeny.ai/job/onboarding-analyst-bvnk-south-africa-dhvxh9h2bdjq) — South Africa/, Bulgaria