Sr. Security Compliance Engineer

Scopely is looking for a Senior Security Compliance Engineer to join our Information Security team in Barcelona on a hybrid basis working 2 days a week from the hub. We will consider all candidates willing to relocate to the Barcelona area for this opportunity.

Responsibilities

Embed privacy by design into product, platform, and operational workflows; Design, build, and improve privacy engineering capabilities that support data subject rights requests, data lifecycle management, and regulatory compliance; Translate legal and regulatory requirements into technical requirements, engineering patterns, and actionable implementation guidance; Build and maintain tools, services, and automations in Python to support privacy and compliance operations; Support workflow orchestration and automation using Temporal or similar platforms; Work in AWS and similar environments to operate secure, scalable, and reliable privacy-related systems and integrations; Write and deploy SQL to archive or purge data, and to locate, review, and document data for privacy requirements; Partner with engineers and architects to implement data solutions that enable the business while protecting sensitive data; Conduct privacy assessments, identify risks, and help drive mitigation efforts through tools, training, and guidance; Review new systems, features, and data flows for privacy impact, and partner with teams to design technical controls that reduce privacy risk; Partner with product and engineering teams to design privacy-preserving solutions, including controls for data minimization, retention, deletion, and access; Manage projects and enhancements from requirements gathering through delivery and stakeholder communication; Improve documentation, reporting, evidence collection, and operational processes that support broader compliance efforts; Identify opportunities to reduce manual work, improve data quality, and strengthen consistency through automation

Requirements

5+ years of experience in information security, privacy, compliance, or a related technical role; Hands-on experience building or maintaining solutions in Python; Strong background in software engineering, backend systems, security, data engineering, or data architecture; Experience with AWS and cloud-based architectures; Experience with Temporal or similar workflow orchestration tools; Working knowledge of APIs, JSON, SQL, and related technical tooling; Strong understanding of privacy engineering principles, privacy by design, and technical implementation of data subject rights and data lifecycle controls; Working knowledge of privacy regulations such as GDPR; Familiarity with security and compliance frameworks such as ISO 27001, NIST, or COBIT; Experience working cross-functionally with Legal, Security, Product, and Engineering teams; Strong communication skills, including the ability to explain technical concepts to non-technical audiences; Strong organisational skills and the ability to manage multiple priorities in a fast-paced, global environment; Excellent analytical, problem-solving, and collaboration skills; Experience leveraging or building AI-enabled tools to enhance GRC processes, including developing AI assistants or automation workflows to improve regulatory monitoring, documentation, and control oversight; Ability to navigate ambiguity, balance risk, and quickly learn new technologies; Experience working with data systems and large datasets, including understanding data flows, retention, deletion, and access patterns

Nice to have

Experience with DSR, DSAR, or privacy operations platforms; Graduate-level study in privacy engineering; Experience in gaming, entertainment, or another consumer technology environment; Experience working with internationally distributed teams; Certifications such as CIPT, CIPP, CIPM, CISSP, CISA, CRISC, or FAIR