Fintech GRC Engineer: PCI NYDFS & CI/CD Compliance

SpaceX Super Intelligence; Palo Alto (CA); Vor Ort; USD 152.000 - 258.000; Vollzeit

Benefits dieser Stelle

Equity

Medical

Vision

Dental

401(k)

Disability insurance

Life insurance

Zusammenfassung

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on fintech and financial services regulation to scale compliance across xMoney and related platforms. You will design Compliance‑as‑Code, automate evidence collection, and work closely with engineering to embed controls into the product life cycle.

The role requires PCI DSS, NYDFS, FFIEC experience, privacy frameworks (GDPR, CCPA), cloud familiarity, and strong collaboration with auditors and regulators to

Qualifikationen

• PCI DSS and NYDFS/FFIEC experience
• Compliance-as-Code and automated evidence collection
• Cloud proficiency in AWS/GCP/Azure
• Ability to translate regulatory obligations into technical controls

Aufgaben

• Own PCI NYDFS FFIEC compliance posture across relevant jurisdictions
• Build and extend Compliance-as-Code capabilities
• Operate GRC platforms (e.g., Vanta) and integrate with cloud/engineering systems
• Collaborate with Architects and Engineering Leads to bake compliance into design
• Design and validate controls for fintech environments (cardholder data, access, logging)
• Manage risk register and track regulatory risk with business impact
• Lead audits and regulatory reviews with external assessors and regulators
• Develop, maintain policies and procedures aligned to PCI, NYDFS, FFIEC, privacy laws

Kenntnisse

Analytical thinking

Stakeholder mgmt

Regulatory knowledge

Communication

Ausbildung

Bachelor's degree in CS/InfoSec

Tools

Vanta

CI/CD

Cloud platforms

Jobbeschreibung

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on fintech and financial services regulation to scale compliance across xMoney and related platforms. You will design Compliance‑as‑Code, automate evidence collection, and work closely with engineering to embed controls into the product life cycle.

The role requires PCI DSS, NYDFS, FFIEC experience, privacy frameworks (GDPR, CCPA), cloud familiarity, and strong collaboration with auditors and regulators to