GRC Engineer — Hybrid, Automation & Audits Lead

Apex Fintech Solutions; United States; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Market-leading salary

Annual bonus

28 days annual leave

Training budget

Pension matched up to 7%

Private health insurance

Hybrid work schedule

Flexible working hours

Parental leave

Hybrid city centre office

Job summary

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. The role blends audits, policy, and risk management with engineering skills like API integrations and data querying.

You will help maintain compliance posture across SOC 2, NIST CSF, ISO 27001, and related standards while modernizing evidence collection using Anecdotes and other tools. Collaboration with auditors and engineers is key.

Qualifications

• 2–5+ years of experience in GRC, information security compliance, IT audit, or a closely related field.
• Hands‑on experience with SOC 2 audits (as a practitioner preparing evidence, not just an auditor).
• Working knowledge of NIST CSF and ISO 27001 (or similar frameworks).
• Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, or similar).
• Comfort working with API integrations to ingest data for compliance monitoring and control building.
• Strong SQL or equivalent query language skills.

Responsibilities

• Own or co‑own preparation for and execution of SOC 2 audits with external auditors.
• Lead or support NIST CSF assessments and gap analyses with remediation plans.
• Maintain the organization’s control library, risk register, and policy/procedure repository.
• Configure automated evidence collection via API integrations across cloud, identity, ticketing and infrastructure systems.
• Analyze compliance data to validate control effectiveness and produce audit-ready evidence.

Skills

GRC

SOC 2 audits

NIST CSF

ISO 27001

APIs

SQL

Cloud platforms

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions is seeking a GRC Engineer to build, scale, and operate our governance, risk, and compliance program. The role blends audits, policy, and risk management with engineering skills like API integrations and data querying.

You will help maintain compliance posture across SOC 2, NIST CSF, ISO 27001, and related standards while modernizing evidence collection using Anecdotes and other tools. Collaboration with auditors and engineers is key.