GRC Engineer - FinTech Compliance & Automation

Apex Fintech Solutions LLC; Belfast City District; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Annual bonus

Pension matched up to 7%

Private health insurance

Hybrid work schedule

Monthly catered lunches

Job summary

Apex Fintech Solutions is seeking a hands-on GRC Engineer to help build, scale, and operate our governance, risk, and compliance program across SOC 2, NIST CSF, ISO 27001, and other frameworks. This role blends audits, risk management, and policy with engineering-oriented tasks like API integrations and data querying.

You will maintain evidence collection, respond to DDQs, and collaborate with auditors, security, and engineering teams to strengthen control effectiveness and trust with customers.

Qualifications

• 2–5+ years in GRC, information security, IT audit, or related field.
• Hands-on experience with SOC 2 audits.
• Working knowledge of NIST CSF and ISO 27001 (or similar).
• Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC).
• Comfort working with API integrations to ingest data for compliance monitoring and control building.
• SQL or similar query language proficiency.
• Strong written and verbal communication.
• Ability to manage multiple concurrent audits/assessments.

Responsibilities

• Lead or support SOC 2 audits and evidence collection.
• Perform NIST CSF assessments and remediation.
• Support ISO 27001 readiness and other relevant frameworks.
• Build continuous compliance monitoring using GRC platforms.
• Configure API integrations for evidence collection.
• Analyze compliance data with SQL and validate control effectiveness.
• Maintain risk registers, policy repositories, and control libraries.
• Coordinate audits and reporting to leadership.

Skills

SOC 2 audits

SQL querying

Policy development

Audit coordination

GRC automation

Tools

Anecdotes

Vanta

Drata

OneTrust

ServiceNow GRC

APIs integration

Job description

Apex Fintech Solutions is seeking a hands-on GRC Engineer to help build, scale, and operate our governance, risk, and compliance program across SOC 2, NIST CSF, ISO 27001, and other frameworks. This role blends audits, risk management, and policy with engineering-oriented tasks like API integrations and data querying.

You will maintain evidence collection, respond to DDQs, and collaborate with auditors, security, and engineering teams to strengthen control effectiveness and trust with customers.