Hybrid GRC Engineer — Fintech Compliance & Automation

PEAK6; United States; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Annual bonus

Leave & holidays

Training budget

Pension matched

Private health insurance

Hybrid work schedule

Catered lunches

Snacks and drinks

Hackathon events

Charitable matching

Job summary

Apex Fintech Solutions is seeking a hands-on GRC Engineer to build, scale, and operate our governance, risk, and compliance program. You will work across SOC 2, NIST CSF, and ISO 27001, combining audits with engineering-minded tasks like API integrations and data querying to evidence controls.

You’ll collaborate with auditors and security teams to maintain compliance posture, automate evidence collection, and drive control improvements using Anecdotes or comparable tools.

Qualifications

• 2–5+ years of experience in GRC, information security compliance, IT audit.
• Hands-on with SOC 2 audits.
• Working knowledge of NIST CSF and ISO 27001.
• Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC).
• SQL or similar query languages to analyze compliance data.
• Strong written and verbal communication skills.
• Ability to manage multiple concurrent audits/assessments.

Responsibilities

• Audits & Framework Management: lead or support SOC 2 audits and gap analyses, coordinate with auditors.
• Compliance Monitoring & Governance: build and maintain continuous monitoring and evidence collection via API integrations.
• Risk Management: support risk assessments and third‑party vendor risk processes.
• Due Diligence & Customer Trust: respond to DDQs and customer security questionnaires with well‑documented answers.
• Policies & Procedures: draft and maintain information security policies and procedures.
• Other GRC Functions: assist with audit logistics, reporting, and automation opportunities.

Skills

GRC experience

SOC 2 audits

NIST CSF

ISO 27001

GRC automation

API integrations

SQL

Policy writing

Audit coordination

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Apex Fintech Solutions is seeking a hands-on GRC Engineer to build, scale, and operate our governance, risk, and compliance program. You will work across SOC 2, NIST CSF, and ISO 27001, combining audits with engineering-minded tasks like API integrations and data querying to evidence controls.

You’ll collaborate with auditors and security teams to maintain compliance posture, automate evidence collection, and drive control improvements using Anecdotes or comparable tools.