Security & Compliance Engineer (Remote-First)

Griffin; United States; Remote; USD 100,000 - 130,000; Full time

Benefits offered by this job

Remote-first work from anywhere in UK

Pension

Private medical insurance

Life insurance

Wellbeing support

AI tools access

Job summary

Griffin is seeking an Engineer 1.5 to serve as the engineering voice of security, compliance and assurance. You’ll translate standards into practical controls, build those controls and ship production code alongside the engineering team, while enabling second and third lines with confidence.

In the first months, you’ll own certification, attestation and audit work, including ISO 27001 and SWIFT, with evidence organized and findings driven to closure.

Qualifications

• Hands-on engineering or technical background with production code delivery.
• Experience in security, compliance, risk or assurance with audits/certifications.
• Strong knowledge of change, release, incident management and third‑party governance.
• Analytical and assurance skills: spotting gaps and driving actions.
• Stakeholder management across engineering, auditors and control functions.
• Ability to write clearly and contribute to documentation.

Responsibilities

• Translate standards into practical engineering controls and ship code.
• Own certifications and attestations (e.g., ISO 27001, SWIFT, SOC 2) and corresponding documentation.
• Lead internal and external audits and facilitate customer due diligence.
• Run engineering risk and controls self-assessments and maintain control activities.
• Improve code release and change management processes and sampling.
• Conduct post-incident reviews and share learnings with stakeholders.
• Contribute to operational resilience and manage third‑party engineering governance.

Skills

Hands-on engineering

Security & compliance

Audits & attestations

Stakeholder management

Analytical thinking

Technical delivery

Documentation/writing

Job description

Griffin is seeking an Engineer 1.5 to serve as the engineering voice of security, compliance and assurance. You’ll translate standards into practical controls, build those controls and ship production code alongside the engineering team, while enabling second and third lines with confidence.

In the first months, you’ll own certification, attestation and audit work, including ISO 27001 and SWIFT, with evidence organized and findings driven to closure.