[Hiring] Cyber Security Engineer @qlub

Role Description

As qlub expands across markets, so do our security challenges. From protecting our payments platform to meeting regulatory requirements and earning customer trust, security plays a critical role in how we grow. We are looking for a Cybersecurity Engineer to own our day-to-day security compliance and customer assurance including maintaining security standards and certifications, managing audits and supporting customer security assessments.

This isn't a role limited to compliance checklists. You'll be part of our security team, working closely with engineering and teams across the business. You'll also have opportunities to contribute to:

• Threat detection
• Application security
• Cloud security
• Penetration testing

You'll have the freedom to solve real problems and make a visible impact on how we secure our platform. Things move quickly here and not every challenge comes with a playbook. What matters is strong security fundamentals, curiosity, adaptability and the ability to figure things out and get things done.

Qualifications

• Bachelor’s degree in Information Security, Computer Science or a related field.
• 3+ years of hands-on experience in cybersecurity or information security, including security compliance, assurance or GRC.
• Hands-on experience maintaining an ISO 27001 ISMS, coordinating audits, validating controls and managing compliance evidence.
• Experience handling customer security questionnaires, due diligence assessments and working with auditors and cross-functional teams.
• Working knowledge of PCI DSS, security risk management and frameworks such as NIST CSF.
• Solid technical foundations in cloud and SaaS architectures, networking, identity and access management and web security including OWASP Top 10.
• Strong analytical, problem-solving and communication skills with fluency in English.
• Familiarity with AI-assisted tools for research, analysis and automation with the judgment to validate outputs and handle sensitive information responsibly.

Requirements

• Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
• Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
• Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
• Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
• Coordinate third-party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.
• Contribute to security operations including SIEM/EDR monitoring, threat detection, incident investigations, cloud security and vulnerability management.
• Support application security and DevSecOps initiatives including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA and vulnerability validation.
• Leverage automation and AI to streamline security assessments, compliance activities and operational workflows.

Benefits

• Real ownership over products that impact millions of diners and thousands of restaurants globally.
• The opportunity to solve challenging problems in payments, hospitality, and customer experience.
• A fast-moving environment where great ideas quickly become reality.
• Close collaboration with experienced operators, builders, and industry experts.
• A chance to leave a visible mark on one of the fastest-growing restaurant technology companies globally.