GRC Engineer — EU/UK Compliance & Security

United States Digital Space LLC; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Travel opportunities

Flexible work arrangement

Job summary

SpaceXAI is seeking an experienced GRC Engineer to scale compliance for EU/UK regulatory regimes including DORA and AI Act. You’ll implement Compliance-as-Code, automate evidence collection, and partner with engineering to embed controls into the platform.

You will lead risk assessments for new products and coordinate with external audits, privacy, and governance teams to ensure supervisory readiness and alignment with ISO 27001/SOC2 where applicable.

Qualifications

• 8+ years of experience in GRC, information security compliance, or tech audit in fintech/banking or regulated environments.
• Hands-on implementation/operation of controls per DORA, EU AI Act, NIS2, PSD2/PSR, and UK PRA/FCA.
• Familiarity with EU/UK data privacy regs (GDPR) and privacy coordination.
• Experience with CI/CD integration of compliance checks and continuous monitoring.

Responsibilities

• Own EU/UK financial services and digital operational resilience posture (DORA, ICT risk, incident reporting, resilience testing).
• Develop and maintain Compliance-as-Code capabilities (policy-as-code, automated control validation, evidence collection).
• Operate and extend GRC platforms (e.g., Vanta) and integrate with cloud, identity, logging, and engineering systems.
• Collaborate with Architects/Engineering to bake regulatory requirements into design early.
• Design and validate technical controls for EU/UK environments (access control, logging, encryption, change mgmt, third-party oversight).
• Manage risk register and lead risk assessments for new products and vendors in scope of EU/UK regulation.

Skills

GRC engineering

Regulatory compliance

ISO 27001

CI/CD integration

Audit liaison

Education

Bachelor's degree in CS / cybersecurity

Tools

Vanta

Compliance-as-Code

Job description

SpaceXAI is seeking an experienced GRC Engineer to scale compliance for EU/UK regulatory regimes including DORA and AI Act. You’ll implement Compliance-as-Code, automate evidence collection, and partner with engineering to embed controls into the platform.

You will lead risk assessments for new products and coordinate with external audits, privacy, and governance teams to ensure supervisory readiness and alignment with ISO 27001/SOC2 where applicable.