Sr. Security Engineer - GRC Fintech & Financial Services

X AI
Palo Alto
Full timeUSD 152,000 - 228,000 annuallyFunction: CybersecurityExperience: 8+ yearsEducation: bachelorsSkills: ["Communication","Stakeholder management","Risk judgment","Problem-solving","Project management"]

Own and evolve fintech and financial services compliance across PCI DSS, NYDFS (23 NYCRR 500), and FFIEC guidance for xMoney’s regulated jurisdictions. Build Compliance-as-Code capabilities that automate policy, control validation, continuous evidence collection, and monitoring in CI/CD. Operate and extend GRC tooling (e.g., Vanta), translate regulatory requirements into technical controls, manage the risk register, and partner with auditors, assessors, and engineering to keep audit readiness scaling with the business.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
X AI
X AI
1 month ago

Sr. Security Engineer - GRC Fintech & Financial Services

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Own and evolve fintech and financial services compliance across PCI DSS, NYDFS (23 NYCRR 500), and FFIEC guidance for xMoney’s regulated jurisdictions. Build Compliance-as-Code capabilities that automate policy, control validation, continuous evidence collection, and monitoring in CI/CD. Operate and extend GRC tooling (e.g., Vanta), translate regulatory requirements into technical controls, manage the risk register, and partner with auditors, assessors, and engineering to keep audit readiness scaling with the business.
Location: Palo Alto
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Own and evolve financial services and payments compliance posture across PCI DSS, NYDFS (including 23 NYCRR 500), FFIEC guidance, and related regulatory expectations for xMoney.
  • •Build and maintain Compliance-as-Code capabilities, including policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD.
  • •Operate and extend GRC platforms (e.g., Vanta) for control mapping, evidence management, and continuous compliance; integrate with cloud, identity, and logging systems.
  • •Partner with architects and engineering leads to implement compliance and privacy requirements and produce auditor-ready narratives.
  • •Design, implement, and validate technical controls in fintech environments and operate the cybersecurity and compliance risk register, including risk assessments and reviews for new products and changes.

Pay and Benefits

Salary: USD 152,000 - 228,000 annually
Perks:EquityHealth InsuranceVisionDental401kDisability InsuranceLife Insurance

Key Requirements

  • •Bachelor’s degree in computer science, Information Security, Cybersecurity, or an engineering/STEM field.
  • •8+ years of experience in GRC, security compliance, or technology audit roles in fintech, banking, payments, or other heavily regulated financial environments.
  • •Hands-on experience with PCI DSS and at least one of NYDFS (23 NYCRR 500) or FFIEC cybersecurity/IT examination guidance, including implementing or operating controls.
  • •Experience with Compliance-as-Code and GRC automation tooling (e.g., Vanta or similar) with a focus on continuous monitoring and reducing manual evidence collection.
  • •Technical fluency to discuss engineering, cloud (AWS/GCP/Azure), and security architecture and anticipate how design decisions impact risk and compliance.
Experience:8+ yearsFintechFinancial servicesPaymentsGRCBankingTechnology auditRegulated environments
Education:Bachelor's
Skills:CommunicationStakeholder managementRisk judgmentProblem-solvingProject management
Certifications:CISSPCISACISMCRISCPCIPCIPP/USCIPP/E
Languages:English
Tech Stack:GRCCompliance-as-CodePolicy-as-codeVantaCI/CDPCI DSSNYDFS23 NYCRR 500FFIECGDPRCCPACPRASOC 2ISO 27001AWSGCPAzureIAMLogging and monitoringEncryption

Eligibility

Nationality:US National

Company Brief

X AI
Develops advanced artificial intelligence models and research aimed at building safe, general AI and understanding the fundamental nature of the universe. Focuses on large-scale AI systems, research publications, and building foundational AI capabilities.
Industry: AI & Machine Learning
Company Size: Medium (51 to 250 employees)
Growth: Early Stage Startup
Headquarters: San Francisco, United States
Founded: 2023
Website