Sr. Security Engineer - GRC Fintech & Financial Services

About the role

SpaceXAI is seeking an experienced GRC Engineer to scale compliance for SpaceXAI and xMoney within the EU and UK markets. The role involves architecting systems and processes that automate trust, balancing rigorous regulatory standards with the velocity of a high-growth company. You will partner with engineering teams to design controls into the platform and ensure readiness for EU/UK financial services regulations.

Responsibilities

• Own and evolve EU/UK financial services and digital operational resilience posture across DORA and complementary regulatory guidance.
• Build and maintain Compliance-as-Code capabilities, including automated control validation and continuous evidence collection integrated into CI/CD.
• Operate and extend GRC platforms to serve as the backbone for control mapping and evidence management.
• Partner with Architects and Engineering Leads to integrate security and regulatory requirements into design early.
• Design, implement, and validate technical information security controls such as access control, logging, encryption, and secure SDLC.
• Operate the cybersecurity and compliance risk register to identify, quantify, and track risks.
• Lead information security risk assessments and compliance reviews for new products, features, and vendors.
• Liaise with the Data Privacy team on security-relevant intersections and manage relationships with external auditors and supervisory contacts.

Required skills

• GRC
• Information Security
• Compliance-as-Code
• DORA
• EU AI Act
• NIS2
• PSD2
• UK PRA/FCA
• GDPR
• Vanta
• Cloud Security

Nice to have

• ISO 27001
• SOC 2
• IAM
• Network segmentation
• Infrastructure hardening
• TLPT
• MiCA
• ePrivacy

Qualifications

• Bachelor's degree in computer science, Information Security, Cybersecurity, or an engineering/STEM field
• 8+ years of experience in GRC, information security compliance, or technology audit roles in regulated environments

Certifications

• CISSP
• CISA
• CISM
• CRISC
• ISO 27001 Lead Implementer/Auditor

About the Company

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. The company operates with a flat organizational structure and values engineering excellence, curiosity, and strong communication skills.