GRC Automation Engineer — Build Compliance by Code

Fresha; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Fresha is seeking a Compliance (GRC) Engineer to join our growing team in London. You’ll build and automate evidence, ensure audits stay current, and ship compliance as code across PCI DSS Level 1, ISO 27001, HIPAA, SOC 2, GDPR and NIS2. You’ll work with Security, Platform, IT and product engineering to move fast while keeping audits boring.

You’ll code in Python or Go, run deployments, and shape AI-powered governance as Fresha scales to millions of bookings daily and expands globally.

Qualifications

• 3+ years as software/platform/cloud/SRE/security engineer with compliance automation experience.
• Proficient in Python, Go or similar; built and run production services and integrations.
• Hands-on experience with AWS IAM, logging and infrastructure as code (Terraform).

Responsibilities

• Automate evidence: build integrations pulling control evidence into Sprinto.
• Monitor controls continuously for access, encryption, logging, patching and change approval.
• Ship compliance as code by embedding guardrails in pipelines and infrastructure as code.
• Map one control set to PCI DSS, ISO 27001, HIPAA, SOC 2, GDPR and NIS2.
• Own the platform and fix integrations, controls and ownership.
• Build PCI DSS Level 1: automate controls, scope and data flows from day one.
• Make audits boring by providing automated evidence and guiding technical walkthroughs.
• Work with engineering teams to translate findings into PRs and tickets.
• Report control health and audit readiness to leadership.
• Shape AI governance as the EU AI Act lands.

Skills

Python

Go

AWS

CI/CD

Security engineering

Tools

Sprinto

Vanta

Drata

Terraform

Kubernetes

Postgres

Job description

Fresha is seeking a Compliance (GRC) Engineer to join our growing team in London. You’ll build and automate evidence, ensure audits stay current, and ship compliance as code across PCI DSS Level 1, ISO 27001, HIPAA, SOC 2, GDPR and NIS2. You’ll work with Security, Platform, IT and product engineering to move fast while keeping audits boring.

You’ll code in Python or Go, run deployments, and shape AI-powered governance as Fresha scales to millions of bookings daily and expands globally.