Senior GRC Security Engineer - EU/UK Fintech

Alex Loftus; Dublin; Hybrid; EUR 140,000 - 190,000; Full time

Job summary

SpaceXAI is seeking a Sr. Security Engineer focused on Governance, Risk, and Compliance (GRC) across EU/UK financial services regulation. You will architect and scale a robust GRC program, integrating controls into engineering workflows and collaborating with privacy, legal, and audit teams.

The role demands hands-on experience with DORA, EU AI Act, NIS2, and Compliance-as-Code, with strong communication and leadership to bridge engineering and regulatory needs.

Qualifications

• Bachelor's degree in CS/InfoSec or a STEM field.
• 8+ years in GRC, information security compliance, or technology audit in fintech/regulated environments.
• Experience with Compliance-as-Code and GRC automation tooling.
• Familiar with EU/UK privacy regulations and data protection.
• Technical fluency with cloud and security architectures.

Responsibilities

• Own and evolve EU/UK financial services and digital resilience posture per DORA and PRA/FCA for the business.
• Build and maintain Compliance-as-Code capabilities and automated evidence collection integrated into CI/CD.
• Operate GRC platforms (e.g., Vanta) for control mapping and continuous compliance.
• Collaborate with Architects and Engineering to bake security/regulatory requirements into design early.
• Design, implement, and validate technical security controls (access, logging, encryption, change mgmt, vulnerability mgmt, third‑party oversight, secure SDLC).
• Maintain the security risk register and track regulatory risk for EU/UK.
• Lead risk assessments and compliance reviews for new products/vendors affecting the EU/UK surface.
• Liaise with Data Privacy to align security measures with privacy needs.
• Engage with auditors and supervisory contacts to facilitate audits and reviews.
• Develop and improve policies aligned to DORA, EU AI Act, NIS2, ISO 27001, SOC 2.
• Champion pragmatic governance prioritizing real risk over checkbox compliance.

Skills

GRC Engineering

InfoSec

Regulatory Compliance

Compliance-as-Code

Cloud/Security Architecture

DORA / NIS2 / EU AI Act

Education

Bachelor's degree in CS/InfoSec or STEM

Tools

Vanta

Job description

SpaceXAI is seeking a Sr. Security Engineer focused on Governance, Risk, and Compliance (GRC) across EU/UK financial services regulation. You will architect and scale a robust GRC program, integrating controls into engineering workflows and collaborating with privacy, legal, and audit teams.

The role demands hands-on experience with DORA, EU AI Act, NIS2, and Compliance-as-Code, with strong communication and leadership to bridge engineering and regulatory needs.