Security Engineer (Fintech GRC)

TL;DR

Security Engineer (Fintech GRC): Architecting and scaling compliance systems for financial services and AI products with an accent on Compliance-as-Code, automated control validation, and regulatory frameworks. Focus on integrating PCI DSS, NYDFS, and FFIEC requirements directly into engineering pipelines to ensure audit readiness in a high-growth environment.

Location: Must be based in New York, NY; Palo Alto, CA; or Washington, DC. Role requires U.S. work authorization (ITAR compliant).

Salary: $152,000 - $228,000 USD

Company

xAI is an AI research and product company focused on creating systems that understand the universe and aid humanity.

What you will do

• Evolve financial services compliance posture across PCI DSS, NYDFS, and FFIEC guidance.
• Build and maintain Compliance-as-Code capabilities, including automated control validation and continuous evidence collection.
• Operate and extend GRC platforms to reduce administrative bottlenecks and integrate with engineering systems.
• Partner with engineering leads to bake compliance and privacy requirements into platform architecture.
• Design and validate technical controls for fintech environments, including segmentation, access control, and encryption.
• Manage the cybersecurity risk register and lead risk assessments for new products and features.

Requirements

• Bachelor's degree in computer science, Information Security, or related STEM field.
• 8+ years of experience in GRC, security compliance, or technology audit within fintech or banking.
• Hands-on experience with PCI DSS and at least one of NYDFS (23 NYCRR 500) or FFIEC guidance.
• Technical fluency in cloud architecture (AWS/GCP/Azure) and security engineering.
• Must be a U.S. citizen, permanent resident, or eligible for ITAR-related authorizations.
• Strong communication skills to translate regulatory requirements for engineering and executive teams.

Nice to have

• Experience supporting SOC 2 or ISO 27001 programs.
• Knowledge of data privacy frameworks like GDPR and CCPA.
• Familiarity with securing AI features in regulated fintech products.
• Relevant certifications such as CISSP, CISA, CISM, or CIPP.

Culture & Benefits

• Comprehensive medical, vision, and dental coverage.
• 401(k) retirement plan with company contributions.
• Equity participation in a high-growth AI organization.
• Short and long-term disability insurance and life insurance.
• Flat organizational structure with a focus on individual initiative and engineering excellence.