EU/UK GRC Engineer – Data Protection & Compliance

SpaceXAI; Dublin; On-site; EUR 85,000 - 125,000; Full time

Job summary

SpaceXAI is seeking an experienced GRC Engineer focused on EU/UK information security and financial services regulation to scale compliance for SpaceXAI and xMoney. You will architect automated trust programs balancing rigor with speed, integrating controls into the platform and CI/CD pipelines.

The ideal candidate has hands-on experience with DORA, EU AI Act, NIS2, and related obligations, plus GRC engineering skills like compliance-as-code and continuous evidence collection; travel may be

Qualifications

• 5+ years of experience in GRC, information security compliance, or technology audit in regulated environments.
• Hands-on experience implementing controls for EU/UK regulations (DORA, AI Act, NIS2, PSD2/PSR, PRA/FCA).
• Familiarity with GDPR concepts and privacy liaison, plus CI/CD integration of checks.
• Technical fluency across on-premises, hybrid, or cloud security architectures.

Responsibilities

• Own EU/UK regulatory posture across DORA and related guidance for regulated products.
• Develop Compliance-as-Code capabilities and automated evidence collection in CI/CD pipelines.
• Operate GRC platforms (e.g., Vanta) and integrate with cloud, identity, logging, and engineering systems.
• Collaborate with Architects and Engineers to bake requirements into design early.
• Design and validate security controls (access, logging, encryption, change mgmt, vulnerability mgmt).
• Maintain risk registers and track regulatory risk with actionable reporting.
• Lead risk assessments and compliance reviews for new products, vendors, and changes.
• Coordinate with Data Privacy to address security/privacy intersections and audits.
• Engage with external auditors and supervisory contacts to ensure reasonable, clear requests.
• Develop policies and standards aligned to DORA, EU AI Act, NIS2, and ISO 27001/SOC 2.
• Prioritize governance improvements that address real risk over checkbox compliance.

Skills

GRC engineering

Regulatory knowledge EU/UK

CI/CD integration

ISO 27001 / SOC 2

Security risk assessment

Education

Bachelor's degree in Computer Science or related field

Tools

Vanta

CI/CD tooling

Job description

SpaceXAI is seeking an experienced GRC Engineer focused on EU/UK information security and financial services regulation to scale compliance for SpaceXAI and xMoney. You will architect automated trust programs balancing rigor with speed, integrating controls into the platform and CI/CD pipelines.

The ideal candidate has hands-on experience with DORA, EU AI Act, NIS2, and related obligations, plus GRC engineering skills like compliance-as-code and continuous evidence collection; travel may be