Sr. Security Engineer - GRC EU/UK Regulation & Data Protection

X AI
London
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 5+ yearsEducation: bachelorsSkills: ["Initiative","Communication","Prioritization","Stakeholder management","Problem-solving"]

Own and evolve the EU/UK financial services and digital operational resilience (DORA) and related regulatory compliance posture. Build Compliance-as-Code capabilities that automate policy, continuous evidence collection, and control validation within CI/CD. Operate GRC tooling (e.g., Vanta), integrate with engineering systems, design and validate security controls for regulated environments, manage a compliance risk register, and partner with engineering, privacy, and auditors to keep compliance audit/supervisor ready as the business scales.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
X AI
X AI
1 day ago

Sr. Security Engineer - GRC EU/UK Regulation & Data Protection

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own and evolve the EU/UK financial services and digital operational resilience (DORA) and related regulatory compliance posture. Build Compliance-as-Code capabilities that automate policy, continuous evidence collection, and control validation within CI/CD. Operate GRC tooling (e.g., Vanta), integrate with engineering systems, design and validate security controls for regulated environments, manage a compliance risk register, and partner with engineering, privacy, and auditors to keep compliance audit/supervisor ready as the business scales.
Location: London
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own and evolve the EU/UK financial services and digital operational resilience posture across DORA and complementary EU/UK regulatory guidance for xMoney.
  • •Build and maintain Compliance-as-Code capabilities (policy-as-code, automated control validation, continuous evidence collection) integrated into CI/CD for scalable audit readiness.
  • •Operate and extend GRC platforms (e.g., Vanta) for control mapping and evidence management, integrating with cloud, identity, and logging to reduce administrative bottlenecks.
  • •Design, implement, and validate technical information security controls for regulated EU/UK environments, including secure SDLC and third-party/critical provider oversight.
  • •Manage a cybersecurity and compliance risk register, lead risk assessments and compliance reviews for products/vendors/architectural changes, and liaise with external auditors and the Data Privacy team.
Travel: Low travel

Key Requirements

  • •Bachelor’s degree in computer science, information security, cybersecurity, or an engineering/STEM field.
  • •5+ years of experience in GRC, information security compliance, or technology audit roles in fintech/banking/payments with EU and/or UK exposure.
  • •Hands-on experience implementing or operating controls against DORA, the EU AI Act, NIS2, PSD2/PSR, or UK PRA/FCA operational resilience expectations.
  • •Familiarity with data privacy regulations applicable to the EU/UK region (e.g., EU GDPR, UK GDPR, UK Data Protection Act 2018) to liaise with Privacy counterparts.
  • •Experience implementing Compliance-as-Code/GRC automation tooling (e.g., Vanta) with continuous monitoring and reduced manual evidence collection.
Experience:5+ yearsFintechBankingPaymentsGRCTechnology audit
Education:Bachelor's
Skills:InitiativeCommunicationPrioritizationStakeholder managementProblem-solving
Certifications:CISSPCISACISMCRISCISO 27001 Lead ImplementerISO 27001 Lead Auditor
Languages:English
Tech Stack:DORAEU AI ActNIS2PSD2PSRUK PRAFCAVantaCompliance-as-CodePolicy-as-codeCI/CDCI CDAWSGCPAzureISO 27001SOC 2IAMLogging and monitoringEncryption

Company Brief

X AI
Develops advanced artificial intelligence models and research aimed at building safe, general AI and understanding the fundamental nature of the universe. Focuses on large-scale AI systems, research publications, and building foundational AI capabilities.
Industry: AI & Machine Learning
Company Size: Medium (51 to 250 employees)
Growth: Early Stage Startup
Headquarters: San Francisco, United States
Founded: 2023
Website