GRC Engineer: Fintech Compliance & Automation

APEX Fintech Solutions UK; Belfast City District; Hybrid; GBP 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Annual bonus

Pension matched up to 7%

Private health insurance

Hybrid work schedule

28 days annual leave + 10 NI holidays

Lunches provided

Zusammenfassung

Apex Fintech Solutions is seeking a GRC Engineer in Belfast to build and operate our governance, risk, and compliance program. You will balance audits, risk management, policy work, and data-driven control automation with strong collaboration across auditors, engineers, and business teams.

You’ll help maintain compliance posture across SOC 2, NIST CSF, ISO 27001, and other standards, while modernizing evidence collection and monitoring through platforms like Anecdotes and related tools.

Qualifikationen

• 2–5+ years in GRC, information security compliance, IT audit, or related field
• Hands-on with SOC 2 audits and evidence gathering
• Familiar with NIST CSF and ISO 27001
• Experience with GRC automation platforms and API data ingestions

Aufgaben

• Own or co-own SOC 2 audits from scoping to evidence collection
• Lead NIST CSF assessments and produce remediation plans
• Support ISO 27001 readiness and other regulatory mappings
• Build continuous compliance monitoring using GRC tools and API integrations
• Query and analyze compliance data to validate controls and evidence

Kenntnisse

SOC 2 audits

NIST CSF

ISO 27001

APIs

SQL

Policy drafting

Written communication

Ausbildung

CISA / CISSP (preferred)

Tools

Anecdotes

Vanta

Drata

OneTrust

ServiceNow GRC

SQL (query languages)

Jobbeschreibung

Apex Fintech Solutions is seeking a GRC Engineer in Belfast to build and operate our governance, risk, and compliance program. You will balance audits, risk management, policy work, and data-driven control automation with strong collaboration across auditors, engineers, and business teams.

You’ll help maintain compliance posture across SOC 2, NIST CSF, ISO 27001, and other standards, while modernizing evidence collection and monitoring through platforms like Anecdotes and related tools.