Senior GRC Engineer

The role

You will act as a technical bridge between GRC and the rest of the business to translate compliance and risk requirements into implementation details. You will build processes, scripts, and tooling to embed controls into daily operations and automate compliance monitoring.

What you will do

• Act as a technical GRC partner to technical and non-technical teams
• Translate compliance, governance, and risk requirements into implementation details
• Engage in architecture and design discussions
• Use cross-framework control crosswalk to identify synergies across regulatory requirements
• Support customer-facing security and compliance conversations
• Build processes, scripts, workflows, and tooling to embed controls into daily operations
• Design automation for continuous compliance and risk data
• Create knowledge-sharing resources, documentation, and diagrams
• Partner with Risk Management to engineer risk identification, scoring, and monitoring
• Support continuous monitoring across Compliance, Risk, and Governance

Required qualifications

• Extensive commercial experience in security engineering, GRC, DevSecOps, or a closely related technical role
• Hands-on exposure to compliance/regulatory frameworks
• Comfortable writing scripts or light code (Python, Bash, or similar)
• Working knowledge of at least two of: ISO 27001 and its extensions (27017, 27018, 27701, 42001), SOC 1/2
• Familiarity with UK/EU-relevant frameworks (Cyber Essentials, UK GDPR, ISO 27701, etc.)
• Experience using a cross-framework control mapping/crosswalk
• Comfortable building and reading system/data-flow diagrams
• Proficient with a GRC/risk platform (e.g., Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC, or similar)
• Experience translating compliance/risk requirements into implementation guidance for engineering teams
• Comfort engaging directly with engineering teams and customers on technical topics

Nice to have

• Hands-on experience applying AI/LLM tooling to a real operational workflow
• Familiarity with OSCAL or similar machine-readable control languages
• Experience with quantitative or semi-quantitative risk scoring methodologies (e.g., FAIR or similar)
• Experience with FedRAMP and/or HIPAA/HITRUST
• Experience supporting external audits or assessments as a technical point of contact
• Exposure to sovereign/regional cloud regimes relevant to international expansion

About the company

Anaplan is a team of innovators focused on optimizing business decision-making through an AI-infused scenario planning and analysis platform. Their customers include global companies such as Coca-Cola, LinkedIn, Adobe, LVMH, and Bayer.