Senior GRC Engineer

In this role you drive compliance by design for Anaplan’s GRC program. You bridge GRC with engineering and business teams, ensuring UK/EU regulatory and market-access requirements are embedded into product and operations. You’ll transform audits into continuous controls, monitoring, and documentation that explain the reasoning behind each control. You will work across cross-framework mappings to streamline certifications and support customer conversations. You’ll be part of a growth-focused team within a culture that values diversity, collaboration, and measurable security impact.

• Act as a technical GRC partner translating compliance and risk requirements into actionable implementation details
• Leverage cross-framework control crosswalk to reduce duplicate effort across certifications
• Support customer-facing security/compliance conversations requiring deep technical context
• Build automation, processes, scripts, and workflows embedding controls into daily operations
• Create knowledge resources and diagrams clarifying the rationale behind controls, with emphasis on UK/EU frameworks
• Partner with Risk Management to integrate risk identification, scoring, and monitoring into day-to-day operations and ConMon

• Extensive commercial experience in security engineering, GRC, DevSecOps, or related technical role
• Hands-on scripting or light coding (Python, Bash, or similar) for automation
• Working knowledge of ISO 27001 family and SOC 1/2, plus familiarity with UK/EU frameworks and crosswalk usage
• Experience with GRC/risk platforms (e.g., Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC)
• Ability translating compliance/risk requirements into implementation guidance for engineering teams
• Comfort engaging with both engineers and customers on technical topics and tooling
• Nice-to-Have: AI/LLM tooling in operational workflows; OSCAL or similar languages; quantitative risk scoring methods; FedRAMP/HIPAA/HITRUST; sovereign cloud exposure

• Effective communicator across technical and non-technical stakeholders
• Analytical mindset with emphasis on continuous improvement
• Collaborative and customer-oriented mindset
• Python or Bash scripting for automation
• GRC platforms (Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC)
• Cross-framework control mapping or crosswalk usage