Security & Compliance Engineer

Blp Digital seeks a Senior Security & Compliance Engineer to own end-to-end security and compliance, maintaining ISO 27001 and SOC 2 certifications, supporting enterprise sales, and automating compliance tasks. The role offers direct ownership, autonomy, and collaboration with the CTO in a remote-friendly, engineering-focused environment.

This role is the single point of accountability for security and compliance across the entire company, working directly with the CTO to maintain ISO 27001 and SOC 2 certifications, support enterprise deals, and reduce manual compliance work through automation. It sits at the intersection of engineering, compliance, and enterprise sales, offering real autonomy and impact from day one.

Responsibilities

• Own security and compliance across all company areas, including certifications, infrastructure, customer-facing security, and internal tooling.
• Maintain ISO 27001 and SOC 2 certifications by managing audits, collecting evidence, and ensuring continuous compliance.
• Lead responses to customer security questionnaires during enterprise sales cycles, representing the company’s security posture confidently and independently.
• Develop and maintain security documentation, including internal policies, controls, and runbooks.
• Drive remediation efforts resulting from audits and penetration tests.
• Create internal AI tools to automatically answer security questionnaires and reuse existing knowledge systematically.
• Enhance and secure AWS and GCP infrastructure.
• Contribute to CI/CD pipelines, infrastructure build, and AWS migration projects.
• Collaborate with the CTO on security strategy, infrastructure decisions, and the compliance roadmap.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or equivalent hands-on experience.
• 4+ years in a DevOps, cloud, or security engineering role.
• Direct experience owning or co-owning an ISO 27001 or SOC 2 certification, including full audit cycle involvement.
• Ability to work independently across compliance processes such as audits, controls, documentation, and remediation.
• Confidence in representing the company’s security posture in enterprise sales discussions.
• Practical experience securing AWS and/or GCP infrastructure.

Nice to have

• Familiarity with Vanta or similar GRC platforms is beneficial.
• Strong interest in AI and automation, ideally with experience building internal tooling.

What the company offers

• Direct ownership as the single point of accountability for security and compliance across a global SaaS platform serving over 20,000 daily users.
• Collaborate directly with the CTO on strategic decisions, not just execution.
• Build AI-powered tools to automate compliance tasks and eliminate repetitive work.
• Autonomy and ownership from day one in a fast-paced, technically rigorous environment.
• Remote-friendly work model within a senior, engineering-focused culture.

About the company

Blp Digital is redefining ERP automation using agentic AI, spun out of ETH Zurich and HSG, solving real enterprise challenges with advanced technology and a strong ownership mindset. As one of Switzerland’s fastest-growing SaaS scaleups, the company has achieved product-market fit with a growing global customer base and recently welcomed Goldman Sachs Alternatives as a growth investor, expanding into the UK with a London office.

• Innovative use of agentic AI to solve enterprise ERP automation challenges.
• Strong ownership culture rooted in technical excellence.
• Fast-growing SaaS scaleup with global customer base and recent investment from Goldman Sachs Alternatives.
• Expanding into the UK with a London office.
• Engineering-focused, remote-friendly environment.