{"id":3516318,"url":"https://alion.io/job/griffin-security-and-compliance-engineer","title":"Security and Compliance Engineer","company":{"id":16322,"name":"Griffin","domain":"griffin.com","url":"https://alion.io/company/griffin-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":158000,"period":"year","method":"role_country_seniority_unknown","sample_n":227},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Claude","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"Incident Management","optional":true}],"status":"live","first_seen_at":"2026-10-30T09:28:15Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-08T20:01:20Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"About Griffin\nHi, we’re Griffin. We’re a fully regulated UK bank that powers the accounts and payments offerings of product-led fintechs and platforms like Uber, Yonder, Prosper, and Sidekick. By doing the heavy lifting behind the scenes, our customers can focus on what they do best - delivering amazing customer experiences.\nWe’ve grown rapidly since our launch in 2024, and today provide the banking backbone behind products in remittance, payroll, wealth, insurance, proptech, payments, neobanking and more.\nWe’re moving into card issuing, stablecoin infrastructure, and agentic finance next as we continue to support the next generation of product-led companies.\nLearn more about what we do\nOur culture\nWe believe that smart, motivated, conscientious people thrive in high-trust, high-autonomy environments and have done our best to create such an environment at Griffin. People who thrive here don’t require much hand-holding, and go out of their way to figure out how to contribute in the most valuable way possible.\nWe've been remote-first since we were established in 2017 and we remain so today. Work here is asynchronous and fully flexible - because we want to be a part of your life in a way that helps you to get the most out of both your work and home life.\nWe understand that our culture and ways of working aren’t for everyone, and we’re very intentional about our hiring process as a result. We won't hire people who don’t seem like a strong fit for our core values, even if they're otherwise extremely qualified.\nOur strong culture has helped us to remain a mission-driven company as we have scaled, and gives our people a clear, explicit operating framework and the space to focus on delivering real value for our customers.\nLearn more about our culture.\nThe Team\nThe Craft function has seven small, cross-functional engineering teams - each with engineers, an engineering manager, and a product manager, working closely with designers.\nYou will work across the whole Craft function, with the remit of improving our controls and cyber security governance. You will initially work with and report to the Engineering Manager for Infrastructure as you establish yourself and take on your day to day responsibilities, additionally you will work closely with our CTO and Founder, Allen Rohner.\nThe Opportunity\nWe're looking for an Engineer 1.5 to become the engineering voice of security, compliance and assurance at Griffin. Sitting across engineering, security, risk and operational resilience, you'll turn standards and regulatory expectations into practical controls that engineers actually want to use and you’ll build those controls yourself, shipping code to production alongside the engineering team. You’ll also give our second and third lines real confidence in what we’ve built. It’s a rare hybrid role with broad ownership and a direct hand in strengthening Griffin’s security.\nWhat Success Looks Like\nIn your first 6 months, you'll have taken ownership of our certification, attestation and audit work including ISO 27001 and SWIFT, with evidence organised and findings driven through to closure. Our engineering risks and controls will be well maintained, and our release, change and post-incident processes will be stronger. You’ll have shipped code that automates control checks and evidence collection, and you’ll be a regular contributor to our codebase.\nBy month 12 our resilience plans, including Important Business Service technical mapping, B& Continuity Planning and disaster recovery, will be current, and security and compliance will be easier to run and easier to demonstrate to customers, thanks to clearer ownership and smart automation.\nTo Do This You’ll Own\nControl design and cyber security governance: translating standards into practical engineering controls and building and shipping the code that puts them in place, working with Engineering teams to get them live\n\nCertifications and attestations, from SWIFT and FPS today to schemes like SOC 2 and ISO 27001 in the future, including the documentation behind them\n\nInternal and external audits and customer due diligence requests, owning findings and driving them to closure\n\nEngineering Risk and Controls Self Assessments, controls and actions, plus recurring control activity such as chaos testing and backup/restore\n\nCode release and change management, improving the process and sampling releases to check adherence to policy\n\nPost-incident reviews, including follow-up actions and sharing learnings with the right stakeholders\n\nEngineering's contribution to operational resilience (DR plans and IBS technical mapping) and to managing engineering third parties alongside Operations\n\nWe expect you to shape this role\nThis description reflects what we need today. How you achieve these outcomes, where you focus your energy, how this role evolves-that's for you to define as you learn what our customers need and where our technical gaps are.\nYour background\nTo ensure this, we're looking for people who have:\nA hands-on engineering or technical background, including experience writing and shipping production code with an engineering-first approach to turning standards into practical controls and technical delivery\n\nExperience in security, compliance, risk or assurance within a technical environment, including owning or significantly contributing to audits, certifications or attestations\n\nStrong knowledge of compliance, risk and cyber security principles, and a broad understanding of change and release management, incident management, operational resilience and third-party governance\n\nSharp analytical and assurance skills: spotting gaps, assessing adherence to standards and following actions through\n\nStakeholder management and influencing skills across Engineering, SMEs, auditors and control functions, with a pragmatic, proportionate approach to governance\n\nA love of writing - we have a major amount of written documentation that you will be contributing to, and we place a high degree of importance on clarity and readability (you can find out more here about how we write)\n\nIdeally, you would also:\nBe familiar with frameworks such as SOC 2, ISO 27001, SWIFT and FPS, ideally from a regulated fintech or challenger bank environment\n\nHave used automation and code to improve security, compliance or control processes and documentation\n\nWhat can we offer you?\nWe are an early stage startup and we're working hard to expand our benefits package. We're planning to add to this list in the future.\nRemote-first flexibility: Work from anywhere in the UK\n\nWork from abroad: Up to 20 days a year\n\nTime off: 25 days’ holiday, bank holidays and a winter break (we shut down between Christmas and New Year)\n\nShare options: Own a part of what we’re building together\n\nPension: Auto-enrolment into our Penfold scheme\n\nInsurance: Private medical with Bupa (including family cover) and life insurance with AIG\n\nWellbeing: 1:1 coaching and therapy session available through Oliva\n\nFamily leave: Enhanced parental leave with up to 6 months on full pay after two years’ service\n\nAI tools: Everyone has a Claude subscription on us and access to other premium tools\n\nYour setup: We’ll support you in creating a comfortable and effective WFH environment.\n\nAs a bank, we’re committed to maintaining the highest standards of security. This means that the successful candidate will need to complete background screening, and our offer will be conditional upon satisfactory review of these checks. This would include verification of right to work, criminal record, credit history, social media and professional reference checks.\nHow do I apply?\nAre we your next move? Apply via the link below, if there's a match our Talent team will reach out to schedule an initial conversation and talk you through what happens next.\nWe’re remote-first\nWe trust people to do great work wherever they are. We hire across the UK and most of our team works remotely full-time. We have a small London office in Moorgate for those who want it, and about a third of the company is close enough to use it occasionally, but there's no expectation to be there. What matters is the work, not where you do it.\nUnder representation\nAt Griffin, we’re looking for people who instinctively vibe with our values, behaviours and mission. You’re encouraged to apply, even if your experience doesn’t tick every box. Careers, like life, can take many twists and turns. Your technical expertise and path to where you are today will stand out. We're committed to creating a place where everyone belongs and we welcome diverse perspectives, backgrounds and people who are ready to build a global platform for programmable finance\nGriffin Bank Ltd request that recruitment agencies do not speculatively submit CVs to any employee or associate of our company unless explicitly asked to do so by a member of our Talent team.\nAny CVs sent to any member of our team on a speculative basis will not be recognised and we will not accept liability for any fee or commission should we subsequently employ a candidate who applied to us directly or was introduced by an instructed agency that may also have been submitted speculatively by an uninstructed agency.","description_format":"text","description_chars":9209,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Stock options"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Financial Software & Embedded Finance","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T10:27:33Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":8,"expected_fill_days":40,"reasons":["conf:2","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/griffin-security-and-compliance-engineer","json_url":"https://alion.io/job/griffin-security-and-compliance-engineer.json","meta":{"generated_at":"2026-11-08T23:11:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":48298,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":16322},"rest":"https://alion.io/mcp/rest/get_company?id=16322"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgriffin-security-and-compliance-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgriffin-security-and-compliance-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgriffin-security-and-compliance-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/griffin-security-and-compliance-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgriffin-security-and-compliance-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3516318}},{"tool":"search_jobs","arguments":{"company":"griffin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3516318},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}