Senior GRC Engineer

The role

You will act as a technical bridge between GRC and the rest of the business. You will build processes, scripts, and tooling to embed controls into daily operations and automate compliance monitoring.

What you will do

• Act as a technical GRC partner to technical and non-technical teams
• Translate compliance, governance, and risk requirements into implementation details
• Use the cross-framework control crosswalk to identify synergies across regulatory requirements
• Support customer-facing security/compliance conversations
• Build processes, scripts, workflows, and tooling to embed controls into daily operations
• Design automation for continuous compliance and risk data
• Create knowledge-sharing resources, documentation, and diagrams
• Partner with Risk Management to engineer risk identification, scoring, and monitoring
• Support continuous monitoring across Compliance, Risk, and Governance

Required qualifications

• 6+ years in security engineering, GRC, DevSecOps, or a closely related technical role
• Hands-on exposure to compliance/regulatory frameworks
• Comfortable writing scripts or light code (Python, Bash, or similar)
• Working knowledge of at least two of: ISO 27001 and its extensions (27017, 27018, 27701, 42001), SOC 1/2, Cyber Essentials, or similar
• Experience using a cross-framework control mapping/crosswalk
• Comfortable building and reading system/data-flow diagrams
• Proficient with a GRC/risk platform (e.g., Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC, or similar)
• Experience translating compliance/risk requirements into implementation guidance
• Comfort engaging directly with engineering teams and customers on technical topics

Nice to have

• Hands-on experience applying AI/LLM tooling to a real operational workflow
• Familiarity with OSCAL or similar machine-readable control languages
• Experience with quantitative or semi-quantitative risk scoring methodologies (e.g., FAIR or similar)
• Experience with FedRAMP and/or HIPAA/HITRUST
• Experience supporting external audits or assessments as a technical point of contact
• Certifications such as CISA, CISSP, or ISO 27001 Lead Implementer

About the company

Anaplan is a team of innovators focused on optimizing business decision-making through an AI-infused scenario planning and analysis platform. Their customers include global companies like Coca-Cola, LinkedIn, Adobe, LVMH, and Bayer.