Security and Compliance Engineer
G
GriffinBanking, fintech
Location: London or remote within the UKFull-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- CybersecuritySwiftComplianceRisk Management
Requirements
- Have a hands-on engineering or technical background, including experience writing and shipping production code.
- Bring an engineering-first approach to translating standards into practical controls and technical delivery.
- Have experience in security, compliance, risk, or assurance within a technical environment.
- Have owned or significantly contributed to audits, certifications, or attestations.
- Have strong knowledge of compliance, risk, and cybersecurity principles.
- Have a broad understanding of change and release management, incident management, operational resilience, and third-party governance.
- Demonstrate analytical and assurance skills, including identifying gaps, assessing adherence to standards, and following actions through.
- Have stakeholder management and influencing skills across Engineering, subject-matter experts, auditors, and control functions.
- Be able to write clear, readable documentation.
- Ideally, be familiar with SOC 2, ISO 27001, SWIFT, and FPS, preferably in a regulated fintech or challenger bank environment.
- Ideally, have used automation and code to improve security, compliance, or control processes and documentation.
Responsibilities
- Translate standards into practical engineering controls and build and ship the code that implements them.
- Own certification and attestation work, including supporting documentation.
- Manage internal and external audits and customer due diligence requests, driving findings to closure.
- Maintain engineering risk and control self-assessments, controls, and actions.
- Support recurring control activity, including chaos testing and backup and restore.
- Improve code release and change management processes and sample releases for policy adherence.
- Coordinate post-incident reviews, follow-up actions, and sharing learnings with stakeholders.
- Support operational resilience through disaster recovery plans and Important Business Service technical mapping.
- Help manage engineering third parties alongside Operations.
View Full Description & ApplyYou'll be redirected to the employer's site
