Maintenance of Way Equipment Services

Security Operations

• Integration of new data sources into the SOC, including AWS, AI platforms, and crypto systems.
• Development and refinement of detection rules for identifying suspicious activity in logs.
• Automation of incident response processes using playbooks and orchestration tools.
• Conducting Red Team tests and attack simulations in accordance with DORA standards and others.
• Active participation in threat hunting and continuous improvement of the threat detection system.
• Maintenance and updates of existing SOC tools to ensure their relevance and effectiveness.
• Implementation of new tools and solutions (including open-source and AI tools) to enhance SOC capabilities.
• Collaboration with other teams to align SOC functions with technical and business requirements.
• Participation in on-call rotations and real-time incident response.
• Preparation and maintenance of internal SOC documentation, procedures, and knowledge bases.

SOC Engineer

Risk

• Establish and maintain a proportionate, risk-based framework aligned to Salvadoran regulators (SSF/CNAD/BCR) and international standards (ISO 31000/COSO).
• Define the risk taxonomy, Risk Appetite Statement, limits, and governance (Board/Risk Committee reporting).
• Serve as the primary contact on risk topics with SSF/CNAD/BCR and support exams and information requests in coordination with Compliance/Legal.
• Independently challenge the MLRO/Compliance on AML/CFT, sanctions (TFS), KYC/KYB, monitoring quality, SAR/STR escalation pathways, screening coverage, and control effectiveness.
• Run RCSA and control testing, capture incidents/loss events, maintain risk registers, monitor KRIs, and track issues/remediation to closure.
• Map important business services and third-party dependencies; set impact tolerances; oversee BCP/DR and outsourcing/TPRM (due diligence, SLAs, audit rights, exit/contingency plans).
• Lead product/change risk assessments across payments/crypto, custody/flow, market/price/FX, liquidity/settlement, technology/cyber and data protection, including scenario testing.
• Maintain clear escalation routes to the CEO/Board for material risk events or limit breaches and table action plans with owners and verification.
• Deliver targeted training on risk appetite, incident reporting, outsourcing, and operational resilience; promote a speak-up, risk-aware culture.
• Draft, review, and update Risk Management Framework, Operational Risk Policy, Outsourcing/TPRM Policy, Incident & Issues Management, and BCP/DR standards.
• Produce timely decision-ready risk dashboards/heatmaps and quarterly Board packs; maintain audit-ready evidence of assessments, reviews, and decisions.

Risk Officer

Customer Support

• Respond to customer inquiries via phone, email, chat, and social media channels in a timely and professional manner.
• Diagnose and resolve customer issues related to e-payment transactions, account management, and technical problems.
• Maintain a deep understanding of our payment products and services to provide accurate information and support to customers.
• Accurately document customer interactions, issues, and resolutions in our CRM system.
• Identify and escalate critical issues to the appropriate departments, providing insights and suggestions for improvement.
• Stay updated on new features, industry trends, and best practices through continuous learning and training.
• Ensure all customer interactions comply with company policies, industry regulations, and data privacy standards.

Financial Crime

• Establish and maintain a compliance programme aligned to the AML/CFT Law and SSF/CNAD/BCR rules
• Keep the Firm continuously compliant with registration, ongoing obligations, and prudential/conduct expectations
• Act as primary contact with SSF/CNAD (and BCR where applicable); prepare and submit required compliance/AML returns and ad-hoc notifications
• File STR/SARs to El Salvador’s Unidad de Investigación Financiera (UIF) via goAML, ensuring confidentiality and on-time submission
• Maintain robust controls for AML/CFT, KYC/KYB, ongoing monitoring, and STR/SAR escalation
• Screen against UN sanctions lists (and risk-based OFAC/HMT/EU where relevant)
• Map and audit KYC systems/controls end-to-end; embed FATF and MENAFATF recommendations and recognised guidance (e.g., Wolfsberg, Egmont)
• Run a risk-based monitoring calendar; document findings and drive remediation to keep internal controls effective
• Perform periodic enterprise and AML/CFT risk assessments; brief senior management/Board and escalate to SSF/CNAD/UIF where thresholds are met
• Maintain direct lines to the Board/CEO; present action plans for breaches or audit/exam findings and track closure
• Deliver targeted, role-based training on Salvadoran AML/CFT obligations and regulatory updates
• Draft, review and update the Compliance Manual, AML/CFT Policy and related SOPs
• Oversee onboarding and periodic reviews (natural persons and KYB), ensure EDD for higher-risk relationships and trigger-event reviews

Compliance Officer / Money Laundering Reporting Officer

• Support the MLRO: assist in developing and maintaining AFC policies, procedures, and controls and provide oversight on AFC compliance matters
• Ensure timely submission of regulatory reports and responses and submit Suspicious Activity Reports (SARs) to the NCA when required
• Engage with regulators and authorities including the FCA and NCA and collaborate with law enforcement in AML investigations
• Participate in compliance risk assessments and contribute to AML policy development and implementation
• Monitor and evaluate processes and procedures to align with the company's risk management framework and utilise data to assess effectiveness of controls
• Draft internal reports (Management Information for Group Financial Crime Committee, Business-Wide Risk Assessment, regular management meeting packs)
• Contribute to development and delivery of training materials and oversight of business-wide training completion
• Collaborate with other departments and stakeholders to facilitate communication and cooperation in AFC compliance matters
• Keep abreast of changes in AML laws and regulations to ensure ongoing compliance

Deputy Money Laundering Reporting Officer

Backend Engineer

• Build and optimize .NET backend systems for card transaction processing (issuing, acquiring, payment networks).
• Work on core platforms handling authorization, clearing, settlement, and card lifecycle management.
• Design and implement high-throughput REST APIs for card operations.
• Optimize database performance (SQL/NoSQL) for transaction-heavy workloads.
• Implement idempotency, retry logic, and reconciliation features for fault-tolerant processing.
• Collaborate with issuing banks, payment networks (Visa/Mastercard), and third-party processors.
• Follow PCI DSS compliance guidelines in code and infrastructure.
• Participate in incident resolution and system monitoring for card transaction flows.
• Work scheduled hours 9-6 UK time zone.

SOC Engineer

Risk Officer

Customer Support

Compliance Officer / Money Laundering Reporting Officer

Deputy Money Laundering Reporting Officer

Senior .Net Developer