Security Engineer - GRC Fintech & Financial Services
Core
Architect and automate Governance, Risk, and Compliance (GRC) systems for fintech and financial services regulation, enabling business velocity while maintaining rigorous standards.
Role type
Senior GRC Engineer (Fintech & Financial Services)
Builds
Automated compliance controls, evidence collection pipelines, and risk management systems integrated into CI/CD.
Domain
Fintech, Financial Services, Cybersecurity, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Fintech compliance expertise (PCI DSS, NYDFS, FFIEC), Compliance-as-Code, GRC platform operations, technical control implementation, risk assessment, regulatory framework fluency (GDPR, CCPA)
Preferred skills
CI/CD integration, IAM and encryption implementation, SOC 2/ISO 27001 experience, payment ecosystem knowledge, data privacy partnership, enterprise sales enablement, risk register management
Technologies
Vanta, AWS, GCP, Azure, CI/CD pipelines
Responsibilities
Own and evolve financial services compliance posture across PCI DSS, NYDFS, and FFIEC; Build and maintain Compliance-as-Code capabilities for automated control validation; Operate and extend GRC platforms; Partner with engineering to bake compliance into platform design; Design and validate technical controls for fintech environments; Operate the cybersecurity and compliance risk register; Lead risk assessments for new products and architectural changes; Manage relationships with external auditors and regulators; Develop and improve policies aligned with regulatory frameworks
Seniority
Senior, hands-on IC
