Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy.

Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment.

Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements.

Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions.

Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale.

Own the quality of your work from design and development through deployment, operation, and continuous improvement.

You have experience developing backend software using an object-oriented programming language such as Java and are comfortable working with data.

You have experience building distributed, high-volume services and deploying and operating them in production.

You understand system design, data structures, and algorithms and can apply these concepts to practical engineering problems.

You care about software quality and build reliable, maintainable solutions.

You have experience implementing security controls or safeguards in software systems and familiarity with cybersecurity or security GRC frameworks.

You enjoy collaborating with others to understand technical requirements, explore trade-offs, and iterate on solutions.

You’re interested in information security governance, risk, and compliance and are motivated to deepen your knowledge in this space.

You communicate clearly with technical and non-technical partners and can explain complex topics to different audiences.

This role is based in London or Stockholm

We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home