# Sr. Security Engineer - GRC Fintech & Financial Services at xAI

xAI is hiring a Sr. Security Engineer - GRC Fintech & Financial Services in Palo Alto, New York and Washington DC, United States. It pays $152k-$258k a year and Level rates it Little AI ●○○○; you can [apply on xAI](https://jobsbylevel.com/go/9192ff14-c50f-4d99-a9ed-45a4b1ea89e4?utm_medium=ai-agent).

AI Level 1, AI centrality 10 out of 100.  Palo Alto, CA; New York, NY; Washington, DC.

## Details

- Company: [xAI](https://jobsbylevel.com/companies/xai)
- AI level: AI Level 1 (score 10 out of 100)
- Location:  Palo Alto, CA; New York, NY; Washington, DC
- Salary: $152k-$258k
- Posted: July 29, 2026
- Apply: https://jobsbylevel.com/go/9192ff14-c50f-4d99-a9ed-45a4b1ea89e4?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=sr-security-engineer-grc-fintech-financial-services-at-xai-048a31

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/sr-security-engineer-grc-fintech-financial-services-at-xai-048a31

## Description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on fintech and financial services regulation to help scale compliance for SpaceXSI and xMoney. As we operate deeper in regulated financial environments, maintaining a robust, transparent, and technically sound GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on fintech compliance experience (PCI DSS, NYDFS, FFIEC), fluency in data privacy frameworks (GDPR, CCPA), and GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Own and evolve financial services and payments compliance posture across PCI DSS, NYDFS (including 23 NYCRR 500), FFIEC guidance, and related banking/fintech regulatory expectations supporting xMoney across relevant jurisdictions. Build and maintain Compliance-as-Code capabilities — policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD — so audit readiness scales with the business rather than depending on manual, point-in-time checks. Operate and extend GRC platforms (e.g., Vanta) as the backbone for control mapping, evidence management, and continuous compliance; integrate with cloud, identity, logging, and engineering systems to reduce administrative bottlenecks. Partner with Architects and Engineering Leads to bake compliance and privacy requirements; translate complex regulatory obligations into concrete technical implementations and auditor-ready narratives without slowing development. Design, implement, and validate technical controls relevant to fintech environments (cardholder data environment scoping and segmentation, access control, logging, encryption, change management, vulnerability management) — not just document them. Operate the cybersecurity and compliance risk register — identify, quantify, and track risks, distinguishing theoretical gaps from meaningful business and regulatory risk. Lead risk assessments and compliance reviews for new products, payment flows, features, vendors, and architectural changes that affect the regulated attack surface. Own and cultivate relationships with external auditors, assessors (e.g., QSAs where applicable), and regulators; serve as the bridge between auditors and internal teams so requests are reasonable, clear, and relevant to our stack. Develop, maintain, and continuously improve policies, standards, and procedures aligned to PCI, NYDFS, FFIEC, privacy laws, and complementary frameworks (e.g., SOC 2, ISO 27001) where they overlap. Champion pragmatic governance — prioritize issues that represent real security or business risk over checkbox compliance. BASIC QUALIFICATIONS: Bachelor's degree in computer

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/sr-security-engineer-grc-fintech-financial-services-at-xai-048a31

Source: https://jobsbylevel.com/jobs/sr-security-engineer-grc-fintech-financial-services-at-xai-048a31

## Cite this page

Level. https://jobsbylevel.com/jobs/sr-security-engineer-grc-fintech-financial-services-at-xai-048a31.

Get job alerts: https://jobsbylevel.com/newsletter