FinTech GRC Engineer: Audits, Compliance & Automation

PEAK6; Belfast City District; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Market-leading salary

Pension matched 7%

Training budget

Private health insurance

Hybrid work

Flexible hours

Parental leave

Modern city center office

Catered lunches

Unlimited snacks

Job summary

Apex Fintech Solutions in Belfast is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. You will handle audits, risk management, policy, and due diligence, while applying engineering skills like API integrations and data querying to evidence controls across SOC 2, NIST CSF, and ISO 27001.

You’ll collaborate with auditors and engineers alike, helping modernize how we monitor and evidence controls using Anecdotes or equivalent platforms.

Qualifications

• Hands-on with SOC 2 audits and evidence collection.
• Familiarity with NIST CSF and ISO 27001 controls.
• Experience drafting information security policies.
• Ability to translate findings for auditors and execs.
• Proficiency with SQL or query languages for data analysis.

Responsibilities

• Own or co-own SOC 2 audits preparation, evidence and remediation.
• Lead or support CSF assessments and gap analyses.
• Maintain ISO 27001 alignment and readiness activities.
• Build and maintain automated evidence collection via APIs.
• Query security data to validate control effectiveness.
• Manage risk, vendor risk, and due diligence responses.
• Draft policies and maintain the control library and risk register.

Skills

GRC experience

SOC 2 audits

NIST CSF

ISO 27001

SQL querying

Policy drafting

Auditors liaison

Communication

Tools

Anecdotes

Vanta

Drata

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions in Belfast is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. You will handle audits, risk management, policy, and due diligence, while applying engineering skills like API integrations and data querying to evidence controls across SOC 2, NIST CSF, and ISO 27001.

You’ll collaborate with auditors and engineers alike, helping modernize how we monitor and evidence controls using Anecdotes or equivalent platforms.