Senior GRC Engineer - Compliance by Design & Automation

VulnU; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Anaplan in London, UK, seeks a Senior GRC Engineer to bridge governance, risk, and compliance with engineering. You will implement cross-framework controls, automate evidence collection, and develop tooling to support continuous monitoring and audits.

You will work with cross-functional teams to translate juristictional requirements into practical controls and documentation, focusing on UK/EU frameworks and market-access needs. This is a high-impact, collaborative role.

Qualifications

• Extensive commercial experience in security engineering, GRC, DevSecOps, or a closely related technical role.
• Hands-on exposure to compliance/regulatory frameworks.
• Comfortable writing scripts or light code (Python, Bash, or similar).
• Working knowledge of ISO 27001 and extensions (27017, 27018, 27701, 42001), SOC 1/2, and UK/EU frameworks.
• Familiarity with cross-framework control mapping/crosswalk to reduce duplicate effort.
• Experience translating compliance requirements into implementation guidance for engineers.

Responsibilities

• Act as a technical GRC partner to technical and non-technical teams, translating requirements into implementation details.
• Use the cross-framework control crosswalk to identify synergies across regulatory requirements.
• Support customer-facing security/compliance conversations with technical context.
• Build processes, scripts, workflows, and tooling that embed controls and automate evidence collection.
• Create knowledge-sharing resources and diagrams to explain controls and rationale.

Skills

Security engineering

GRC

DevSecOps

Automation scripting

ISO 27001

SOC 1/2

UK GDPR familiarity

Cross-framework mapping

Architectural discussion

Tools

Drata

Vanta

Hyperproof

Archer

OneTrust

ServiceNow GRC

Job description

Anaplan in London, UK, seeks a Senior GRC Engineer to bridge governance, risk, and compliance with engineering. You will implement cross-framework controls, automate evidence collection, and develop tooling to support continuous monitoring and audits.

You will work with cross-functional teams to translate juristictional requirements into practical controls and documentation, focusing on UK/EU frameworks and market-access needs. This is a high-impact, collaborative role.