{"id":745451,"url":"https://alion.io/job/openfx-compliance-program-manager-dora","title":"Compliance Program Manager - Dora","company":{"id":6134,"name":"OpenFX","domain":"openfx.com","url":"https://alion.io/company/openfx","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":92,"open_postings":39,"ghost_share":0.051,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":186,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":135000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":32},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-07-22T07:14:26Z","employer_posted_date":"2026-07-24","last_verified_at":"2026-11-08T18:21:11Z","board_verified":true,"closed_at":null,"days_open":109,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":109},"description":"About Us\nOpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Lightspeed, NfX and other top-tier investors.\nRole Overview\nWe are looking for a Security & Compliance Engineer to turn regulatory requirements into real, running controls - and then prove to auditors that they work. This is a senior, hands-on role for someone who thrives in fast-paced, heavily regulated environments and knows how to make compliance provable in production rather than on paper.\nOpenFX is expanding across Europe in a heavily regulated financial environment. As we scale into EU markets, regulators, auditors, and enterprise partners expect provable, continuously operating security controls - not slide decks or one-off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region-specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close that gap.\nYou will own the security controls and evidence that regulators and auditors care about, end to end - from translating regulatory language into concrete mechanisms through to audit walkthroughs and remediation. You will partner closely with Legal, Compliance, Risk, and engineering to ensure compliance is built into the platform rather than bolted on after the fact.\nThis role is based in Amsterdam, Netherlands (EU/EEA).\nKey Responsibilities:\nOwn audit-ready security controlsDesign, implement, and maintain technical and operational controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements.\nEnsure controls are not just documented, but actually enforced in AWS, Kubernetes, and application layers.\n\nBe the technical counterpart to Legal, Compliance & RiskTranslate regulatory language into concrete security mechanisms.\nPartner with Legal and Compliance to monitor new regulations and assess technical impact.\nDecide what is \"good enough\" vs. over-engineered for compliance.\n\nRun audits instead of reacting to themOwn audit preparation, evidence collection, walkthroughs, and remediation tracking.\nBuild repeatable, automated evidence pipelines instead of last-minute scrambles.\nBe the person auditors trust when they ask, \"Show me how this actually works.\"\n\nEmbed compliance into the platformWork with engineering to design systems that are secure by default and defensible to regulators.\nEnsure logging, access controls, encryption, monitoring, and change management meet regulatory expectations.\n\n Automate compliance wherever possibleBuild tooling and scripts to continuously validate controls (access reviews, logging coverage, config drift).\nReduce manual compliance work over time by pushing checks into code and infrastructure.\n\nWhat we are looking for\nMust-haves:\n6+ years in security engineering, cloud security, or compliance-focused security roles.\nHands-on, operational experience implementing DORA in a production/regulated environment (not advisory only) - e.g. ICT risk management, incident classification and reporting, third-party/ICT vendor oversight, and digital operational resilience testing. GDPR implementation experience is a strong bonus.\nExperience supporting SOC 2 and/or ISO 27001 audits (strong plus).\nAbility to translate regulatory requirements into technical controls.\nStrong working knowledge of AWS security fundamentals (IAM, logging, encryption, networking).\nComfortable owning auditor interactions and explaining systems clearly.\nExperience building or automating security/compliance processes (Python, Bash, Go, etc.).\nAccountability for an audit outcome - if you've never owned one, this role is not a fit.\nWhat helps you stand out:\nExperience securing Kubernetes environments.\nFamiliarity with AppSec tooling (SAST/DAST, manual testing).\nExperience with AWS security services (GuardDuty, Config, Security Hub).\nPrior work in fintech, payments, or regulated infrastructure.\nSecurity or compliance certifications (CISSP, CISA, ISO 27001 Lead Implementer, AWS Security).\nFamiliarity with EU financial regulators and national competent authorities (e.g. DNB/AFM in the Netherlands, EBA/ESMA).\nWhat We Offer\nCompetitive salary and benefits package.\nEquity in a rapidly growing company.\nOpportunity to work in a fast-paced startup at the forefront of fintech innovation.\nOpportunity to make a significant impact on global financial infrastructure\nCollaborative work culture with emphasis on personal and professional growth.\nWe are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.","description_format":"text","description_chars":5083,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-09-11T13:59:29Z"}],"visa":[],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.851,"p_room":0.72,"age_days":108,"expected_fill_days":186,"reasons":["conf:3","win:mid","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/openfx-compliance-program-manager-dora","json_url":"https://alion.io/job/openfx-compliance-program-manager-dora.json","meta":{"generated_at":"2026-11-08T19:38:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":41045,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6134},"rest":"https://alion.io/mcp/rest/get_company?id=6134"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopenfx-compliance-program-manager-dora"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopenfx-compliance-program-manager-dora"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopenfx-compliance-program-manager-dora"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/openfx-compliance-program-manager-dora\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopenfx-compliance-program-manager-dora"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":745451}},{"tool":"search_jobs","arguments":{"company":"openfx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":745451},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}