Compliance Platform Engineer

⚙️ Compliance Platform Engineer

 

Phoeniqs Technologies | Powering Sovereign Cloud Infrastructure

At Phoeniqs Technologies, we engineer the infrastructure that powers secure, compliant, enterprise‑grade digital ecosystems.

 

Job Description 

Position Summary: 

Phoeniqs is seeking a highly skilled Compliance Platform Engineer with a strong GRC (Governance, Risk, and Compliance) focus to join the Engineering organization. 

This role is responsible for ensuring that regulatory requirements and certification frameworks are translated into concrete technical capabilities embedded within our platform, systems, and engineering processes. The focus is on building solutions that are secure, compliant by design, automated, and continuously verifiable, rather than relying on documentation alone. 

The ideal candidate combines hands-on engineering expertise with a deep understanding of European and Swiss regulatory frameworks, and is capable of turning these into scalable, enforceable, and auditable technical implementations. The role contributes directly to certifications and future audits, ensuring that compliance is a natural outcome of how the platform operates. 

 

Key Responsibilities 

Regulatory & Certification Translation (Core Focus): 

• Interpret and operationalize requirements from:  

• GDPR and Swiss Federal Act on Data Protection (revDSG) 

• EU AI Act, with focus on technical and operational implications 

• ISO 27001 / 27017 / 27018 

• SOC / ISAE frameworks 

• FINMA expectations and outsourcing guidance 

• German Digital Services Act (DSA) 

• Spanish Esquema Nacional de Seguridad (ENS) 

• Translate these requirements into:  

• Technical controls and enforceable system configurations 

• Architecture patterns and engineering standards 

• Platform-level security and compliance capabilities 

• Maintain mappings between regulations, certifications, and implemented controls 

 

Compliance as a Platform Capability: 

• Design and implement compliance controls as part of the platform itself, not as external or manual processes 

• Ensure controls are:  

• Technically enforced and measurable 

• Automated wherever possible 

• Continuously validated and testable 

• Embed compliance into:  

• System architecture 

• Platform services and components 

• Development and deployment workflows 

• Drive adoption of: