GRC Engineer - Fintech Compliance & Automation

PEAK6; Texas; Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Healthcare

PTO & leave

401k match

Parental leave

Wellness & learning

Job summary

Apex Fintech Solutions is seeking a GRC Engineer to help build, scale, and operate our governance, risk, and compliance program. This is a hands‑on role blending audits, risk management, policy work, and advanced engineering tasks such as API integrations and data querying.

You will support SOC 2 audits, NIST CSF, ISO 27001 readiness, and vendor risk programs while modernizing how we evidence controls using Anecdotes and similar tools.

Qualifications

• 2–5+ years of experience in GRC, information security compliance, IT audit, or related field.
• Hands-on experience with SOC 2 audits and practical evidence collection.
• Knowledge of NIST CSF and ISO 27001 (or similar frameworks).
• Experience with a GRC automation platform and API data ingestion.
• Strong SQL skills and ability to translate findings for auditors and executives.

Responsibilities

• Own or co‑own preparation for and execution of SOC 2 audits with external auditors.
• Lead or support NIST CSF assessments and remediation planning.
• Support ISO 27001 readiness and vendor risk management initiatives.
• Maintain a unified control framework and automate evidence collection via APIs.
• Analyze compliance data and produce audit‑ready evidence; maintain policy repositories.

Skills

SOC 2 audits

GRC automation

SQL

Policy drafting

Auditor liaison

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions is seeking a GRC Engineer to help build, scale, and operate our governance, risk, and compliance program. This is a hands‑on role blending audits, risk management, policy work, and advanced engineering tasks such as API integrations and data querying.

You will support SOC 2 audits, NIST CSF, ISO 27001 readiness, and vendor risk programs while modernizing how we evidence controls using Anecdotes and similar tools.