Sr. Security Engineer - GRC Fintech & Financial Services EU/UK
xAI· Information Security
Hybrid (Dublin, Ireland; London, England, United Kingdom)full-timePosted 2mo ago
About the role
Senior GRC Engineer focused on EU/UK information security and financial services regulation to scale governance, risk, and compliance programs for SpaceXSI and xMoney. Build Compliance-as-Code, automate evidence collection, and integrate controls into engineering workflows to support regulated EU/UK environments.
Responsibilities
- Own and evolve EU/UK financial services and digital operational resilience posture across DORA and related EU/UK guidance (EBA/ESMA/EIOPA, PSD2/PSR, UK PRA/FCA) for xMoney.
- Build and maintain Compliance-as-Code capabilities—policy-as-code, automated control validation, continuous evidence collection, and CI/CD integrated monitoring.
- Operate and extend GRC platforms (e.g., Vanta) as the backbone for control mapping, evidence management, and continuous compliance; integrate with cloud, identity, logging, and engineering systems.
- Partner with Architects and Engineering Leads to bake regulatory requirements into design early; translate obligations into technical implementations and auditor-ready narratives.
- Design, implement, and validate technical information security controls (access control, logging, encryption, change management, vulnerability management, ICT third-party oversight, secure SDLC).
- Operate the cybersecurity and compliance risk register; quantify and track risks aligned to EU/UK supervisory expectations.
- Lead information security risk assessments and compliance reviews for new products, vendors, and architectural changes affecting EU/UK surface, including ICT third-party diligence per DORA.
- Liaise with Data Privacy team on security-relevant intersections (confidentiality, integrity).
- Own and cultivate relationships with external auditors and assessors; serve as bridge between external parties and internal teams.
- Develop, maintain, and improve information security policies, standards, and procedures aligned to DORA, EU AI Act, NIS2 and ISO 27001 / SOC 2 where overlap occurs.
- Champion pragmatic governance—prioritize issues with real security or business risk over checkbox compliance.
Qualifications
- Bachelor's degree in computer science, Information Security, Cybersecurity, or engineering/STEM.
Skills
Required:GRC engineeringCompliance-as-CodeGRC automation toolingcloud / on-prem / hybrid securityRegulatory liaison
Last updated Oct 14, 2026. Interested? Apply on the company site.
More open roles at xAI
- Supervisor, Child Safety Operations5d agoAustin, TX · Safety
- Security Engineer, Kubernetes5d agoHybrid (Palo Alto, CA; Austin, TX; New York, NY; Washington, DC) · Information Security
- Security Engineer - GRC Sales5d agoInformation Security
- Site Reliability Engineer5d agoHybrid (Memphis/Southaven) · Data Center
- Senior Linux Data Center Technician - Memphis5d agoHybrid (Memphis, TN) · Data Center