Security Engineer, GRC Fintech & Financial Services

The role

Own and evolve the payments and financial services compliance program for X Money across PCI DSS, NYDFS, FFIEC and related rules. Build compliance-as-code, automate evidence collection, and partner with engineering so controls are built into the platform.

What you will do

• Own and evolve financial services and payments compliance across PCI DSS, NYDFS (23 NYCRR 500), FFIEC guidance and related regulations supporting X Money
• Build and maintain compliance-as-code, automated control validation and continuous evidence collection integrated into CI/CD
• Operate and extend GRC platforms such as Vanta for control mapping, evidence and continuous compliance
• Partner with architects and engineering leads to build compliance and privacy requirements into systems
• Design, implement and validate technical controls for fintech environments, such as cardholder data scoping, access control, logging, encryption and change management
• Operate the cybersecurity and compliance risk register
• Lead risk assessments and compliance reviews for new products, payment flows, vendors and architecture changes
• Manage relationships with external auditors, assessors and regulators
• Develop and maintain policies, standards and procedures aligned to PCI, NYDFS, FFIEC, privacy laws, SOC 2 and ISO 27001
• Prioritize real security and business risk over checkbox compliance

Required qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or an engineering or STEM discipline
• 3+ years of experience in GRC, security compliance or technology audit in fintech, banking, payments or other heavily regulated financial environments
• Hands-on experience with PCI DSS and at least one of NYDFS (23 NYCRR 500) or FFIEC guidance, including implementing or operating controls

Nice to have

• Experience with compliance-as-code and GRC automation tooling such as Vanta
• Technical fluency in engineering, cloud (AWS/GCP/Azure) and security architecture
• Experience with SOC 2 and/or ISO 27001 programs alongside fintech obligations
• Experience with payment ecosystems, cardholder data environments or tokenization
• Working knowledge of GDPR and CCPA/CPRA
• Familiarity with GLBA, BSA/AML technology controls, money-transmitter rules, or DORA
• Experience enabling enterprise sales through trust centers and security reviews
• Certifications such as CISSP, CISA, CISM, CRISC, PCIP, CIPP/US or CIPP/E

Benefits

• Equity
• Comprehensive medical, vision and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various discounts and perks

Before you apply

• Applicant must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from

About the company

SpaceXSI builds Super Intelligence, including Colossus supercomputers, Grok models and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice and X. The posting also describes SpaceX's goal of making life multiplanetary.