GRC Engineer (Fintech)

TL;DR

GRC Engineer (Fintech): Ensure continuous compliance with key security certifications like ISO 27001, PCI DSS, DORA by leading end-to-end audits and transitioning manual processes to automated systems with an accent on tooling, evidence collection, and control mapping. Focus on owning audits with minimal findings, building pragmatic implementations, and bridging compliance with engineering teams in a high-stakes regulated environment.

Location: Remote (Paris / Barcelona / Berlin / Milan offices)

Company

Europe's leading finance workspace for SMEs with banking at its core, serving 600,000+ customers across 8 European countries, profitable since 2023.

What you will do

• Own and deliver external/internal audits and certifications end-to-end with minimal findings, like PCI DSS.
• Build tooling and automation to reduce manual evidence collection and reporting, starting with ISO 27001.
• Maintain documentary corpus and control mapping for regulations like DORA, enabling continuously provable compliance.
• Translate compliance requirements into actionable requests for technical teams without bureaucracy.
• Prepare and defend compliance positions with auditors using risk-based, pragmatic approaches.

Requirements

• Proven experience owning security compliance frameworks and audits (e.g., ISO 27001, PCI DSS) end-to-end in regulated environments.
• Hands-on automation mindset with tools/scripts for repetitive compliance tasks and evidence collection.
• Ability to challenge interpretations and defend pragmatic compliance with auditors.
• Strong project management and high autonomy to juggle audit calendars, stakeholders, and deadlines.
• Growth mindset, curiosity to grasp technical contexts, and collaborate across frameworks.

Nice to have

• Experience across multiple frameworks like DSP2, PDP.

Culture & Benefits

• 80+ nationalities, 45% women, 56% in leadership; discrimination-free hiring focused on skills and potential.
• AI deeply embedded: unlimited access to top AI tools, encourage experimentation.
• High audit cadence in fast-paced fintech with pragmatic, risk-based methodology.
• Horizontal team structure led by engineer-first manager emphasizing ownership and challenging status quo.
• Cross-functional collaboration with security engineering, internal control, and auditors like Mazars/Deloitte.

Hiring process

• Average 20 working days.
• Human final decisions, AI may assist in screening.