FinTech GRC Engineer: Audits, Security & Automation

Peak6 Investments LLC; Belfast City District; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

Annual bonus

28 days annual leave

Pension matched up to 7%

Private health insurance

Hybrid work schedule

Flexible working hours

Catered lunches

Job summary

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. This hands-on role combines audits, policy, and due diligence with API integrations and data querying to evidence controls.

You will maintain compliance posture across SOC 2, NIST CSF, ISO 27001 and related standards while modernizing how we evidence controls using automation and cloud platforms. This role supports auditors and engineers alike.

Qualifications

• 2–5+ years in GRC, information security compliance, or IT audit.
• Hands-on SOC 2 audits experience with evidence collection.
• Knowledge of NIST CSF and ISO 27001 (or PCI DSS, HITRUST).
• Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC).
• Ability to ingest data via API integrations for monitoring and controls.
• SQL or similar query languages to analyze compliance data.
• Experience drafting and maintaining information security policies.

Responsibilities

• Lead or support SOC 2 audits with auditors, scope, evidence, and remediations.
• Manage compliance monitoring and governance using GRC platforms.
• Develop controls, data pipelines, and alerting for control drift.
• Perform DDQs, RFPs, and customer security questionnaire responses.
• Maintain policy repository and risk registers; report to leadership.

Skills

SOC 2 audits

NIST CSF

ISO 27001

GRC automation

SQL

Policy drafting

API integrations

Python

Communication

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. This hands-on role combines audits, policy, and due diligence with API integrations and data querying to evidence controls.

You will maintain compliance posture across SOC 2, NIST CSF, ISO 27001 and related standards while modernizing how we evidence controls using automation and cloud platforms. This role supports auditors and engineers alike.