Sr. Security Engineer - GRC Fintech & Financial Services

📋 Description

• Own and evolve GRC program across PCI DSS, NYDFS (23 NYCRR 500), FFIEC guidance, and
• Build and maintain Compliance-as-Code, automated control validation, continuous evidence
• Operate and extend GRC platforms (e.g., Vanta) as the backbone for control mapping and evidence
• Partner with Architects and Engineering Leads to translate regulatory obligations into technical
• Design, implement, and validate technical controls (cardholder data environment scope/segmentation
• Lead risk assessments and compliance reviews for new products, payment flows, vendors, and

🎯 Requirements

• Bachelor's degree in computer science, Information Security, Cybersecurity, or STEM field.
• 8+ years in GRC, security compliance, or technology audit in fintech/regulated financial
• Hands-on PCI DSS experience and at least one of NYDFS (23 NYCRR 500) or FFIEC cybersecurity
• Experience with Compliance-as-Code and GRC automation tooling (e.g., Vanta) with focus on
• Technical fluency with cloud (AWS/GCP/Azure), security architecture, and collaboration with

🎁 Benefits

• Base salary $152,000 - $258,000 USD plus equity and comprehensive medical, vision, dental coverage.
• 401(k) retirement plan, short and long-term disability, life insurance, and other perks.