EU/UK GRC Engineer - Data Security & Compliance

Xai; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

SpaceXAI in Ireland is seeking an experienced GRC Engineer to scale EU/UK information security and regulatory compliance across DORA, the EU AI Act, and NIS2. You will architect systems that automate evidence collection and policy-as-code, enabling rapid development without sacrificing controls.

Work with Architects, Engineering, and Privacy to embed regulatory requirements into design, perform risk assessments, and manage audit readiness. Occasional travel may be required.

Qualifications

• Bachelor's degree in CS, information security, or related field.
• 5+ years in GRC, information security compliance, or technology audit in fintech or regulated environments.
• Hands-on with DORA, EU AI Act, NIS2, PSD2/PSR, or UK PRA/FCA resilience expectations.
• Familiar with GDPR concepts and liaising with Privacy counterparts.
• Experience with Compliance-as-Code and CI/CD integration.
• Ability to speak engineering language and collaborate with security architecture teams.

Responsibilities

• Own EU/UK regulatory posture across DORA and resili ence requirements.
• Build Compliance-as-Code capabilities and automated control validation.
• Operate GRC platforms (e.g., Vanta) and integrate with cloud, identity, and CI/CD.
• Collaborate with Architects and Engineering to embed regulatory requirements in design.
• Design, implement, and validate technical security controls for EU/UK environments.
• Manage risk register and lead risk assessments for new products and vendors.
• Lead compliance reviews and liaise with external auditors and privacy teams.
• Develop policies aligned to DORA, EU AI Act, and NIS2; promote pragmatic governance.

Skills

GRC

Regulatory compliance

Risk assessment

CI/CD integration

Security architecture

Communication

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Vanta

Compliance-as-Code

Cloud security tooling

Job description

SpaceXAI in Ireland is seeking an experienced GRC Engineer to scale EU/UK information security and regulatory compliance across DORA, the EU AI Act, and NIS2. You will architect systems that automate evidence collection and policy-as-code, enabling rapid development without sacrificing controls.

Work with Architects, Engineering, and Privacy to embed regulatory requirements into design, perform risk assessments, and manage audit readiness. Occasional travel may be required.