GRC Engineer - Build Automated Compliance & Audit Readiness

Apex Fintech Solutions; Belfast City District; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

28 days annual leave + NI holidays

Annual bonus

Pension matched up to 7%

Private health insurance

Hybrid work schedule

Job summary

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. This role blends audits, risk management, and policy with engineering skills like API integrations and data querying.

You will maintain SOC 2 readiness, support ISO 27001 and other frameworks, and automate evidence collection across cloud, identity, and infrastructure systems. Strong SQL and communication skills are essential.

Qualifications

• 2–5+ years of experience in GRC, information security compliance, IT audit, or a closely related field.

Responsibilities

• Own or co‑own preparation for and execution of SOC 2 (Type I/II) audits, working directly with external auditors to scope, evidence, and remediate findings
• Lead or support NIST CSF assessments and gap analyses, translating results into actionable remediation plans
• Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g., PCI DSS, GLBA, state/federal financial regulations as applicable)
• Maintain a unified control framework that maps overlapping requirements across multiple standards to reduce duplicate effort
• Build and maintain continuous compliance monitoring using GRC platforms such as Anecdotes (or equivalent tools like Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
• Configure and manage automated evidence collection via API integrations with cloud, identity, ticketing, and infrastructure systems
• Design and implement controls that consume ingested data, ensuring accuracy, freshness, and appropriate alerting on control drift or failures
• Query and analyze compliance and security data (SQL or platform-native query languages) to validate control effectiveness and produce audit‑ready evidence
• Maintain the organization's control library, risk register, and policy/procedure repository
• Respond to Due Diligence Questionnaires (DDQs) and customer security questionnaires with accurate, timely, and well-documented answers
• Maintain a trust center / security documentation repository to streamline recurring due diligence requests
• Act as a subject matter resource for prospects, customers, and partners on Apex's security and compliance posture
• Draft, maintain, and periodically review information security and compliance policies and procedures
• Ensure policies remain aligned with current frameworks, regulatory obligations, and actual operational practice
• Support policy attestation, training, and awareness campaigns
• Support internal and external audit logistics, evidence requests, and stakeholder coordination
• Contribute to metrics and reporting for leadership and the board on compliance and risk posture
• Continuously look for opportunities to automate manual GRC workflows

Skills

Communication skills

Multitasking

SQL proficiency

API integration experience

Policy drafting

Fintech/regulatory knowledge

Education

CISA

CISSP

CRISC

ISO 27001 Lead Implementer/Auditor

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. This role blends audits, risk management, and policy with engineering skills like API integrations and data querying.

You will maintain SOC 2 readiness, support ISO 27001 and other frameworks, and automate evidence collection across cloud, identity, and infrastructure systems. Strong SQL and communication skills are essential.