GRC Engineer (Fintech)

TL;DR

GRC Engineer (Cybersecurity/Fintech): Building and automating a continuous compliance program for an AI-native decision platform with an accent on SOC 2, ISO 27001, and EU AI Act. Focus on automating evidence collection via AWS APIs, managing vendor risk reviews, and bridging the gap between security policy and technical implementation.

Location: Hybrid (Berlin, Iasi, or London)

Company

hirify.global is a modular Agentic Decision Platform helping financial institutions become AI-native through automated and optimized decision-making.

What you will do

• Own continuous compliance end-to-end (SOC 2, ISO 27001) to keep the company audit-ready year-round.
• Manage the compliance roadmap and automate evidence collection using Vanta.
• Lead quarterly access reviews and manage vendor risk reviews and DPIAs, specifically for AI tooling.
• Handle technical aspects of customer security questionnaires and DPAs.
• Define and report compliance and risk KPIs to leadership.
• Collaborate with the Security Architect to align written policies with actual controls.

Requirements

• 4+ years of experience in GRC, security compliance, or audit readiness at a SaaS company.
• Proven track record of owning a SOC 2 program end-to-end (must-have).
• Proficiency with continuous compliance tools like Vanta, Drata, or Secureframe.
• Hands-on technical ability to script against AWS APIs for evidence automation.
• Strong communication skills for managing security questionnaires and technical translation.

Nice to have

• Experience with customer trust programs and security whitepapers.
• Exposure to DORA, EU AI Act, or fintech regulations.
• Experience shipping engineering-led automation.
• Familiarity with NIST CSF or CIS Controls.

Culture & Benefits

• Competitive equity and cash compensation package.
• Self-development budget for conferences, books, and classes.
• Flexible equipment choice, including meaningful home office setup.
• Flat hierarchy with direct access to the founding team.
• Professional growth through experienced mentors and a global investor network.