Senior EU/UK Fintech GRC Security Engineer

Pantera Capital; Leinster; Hybrid; EUR 110,000 - 170,000; Full time

Job summary

SpaceXAI seeks an experienced GRC Engineer to scale compliance for EU/UK markets, focusing on information security and regulatory obligations. You will build automated controls, integrate with CI/CD, and partner with engineering to embed security into product design.

The role requires hands‑on experience with DORA, EU AI Act, NIS2, and related regimes, plus strong collaboration with auditors and privacy teams to support a high‑growth company.

Qualifications

• 8+ years of experience in GRC, information security compliance, or technology audit in regulated environments.
• Experience with DORA, EU AI Act, NIS2, PSD2/PSR, UK PRA/FCA operational resilience.
• Familiar with GDPR concepts and privacy interfaces.
• Experience with Compliance‑as‑Code and CI/CD integrations.

Responsibilities

• Own and evolve EU/UK financial services and digital operational resilience posture (DORA, etc.).
• Build and maintain Compliance‑as‑Code capabilities integrated into CI/CD pipelines.
• Operate and extend GRC platforms (e.g., Vanta) for control mapping and evidence management.
• Partner with Architects and Engineering Leads to bake regulatory requirements into design.
• Design and validate technical information security controls for EU/UK environments.
• Manage risk registers and track regulatory risks with practical business impact.
• Lead risk assessments and compliance reviews for new products, vendors, and changes.
• Collaborate with Data Privacy team on security/privacy intersections.
• Engage with external auditors and supervisory contacts as needed.
• Develop and improve information security policies aligned to relevant frameworks.

Skills

GRC engineering

Information security

Compliance tooling

CI/CD integration

Risk assessment

Auditing

Stakeholder management

Communication

Education

Bachelor's degree in computer science or Information Security

Tools

Vanta

Job description

SpaceXAI seeks an experienced GRC Engineer to scale compliance for EU/UK markets, focusing on information security and regulatory obligations. You will build automated controls, integrate with CI/CD, and partner with engineering to embed security into product design.

The role requires hands‑on experience with DORA, EU AI Act, NIS2, and related regimes, plus strong collaboration with auditors and privacy teams to support a high‑growth company.