Senior GRC Engineer (UK/EU) – Compliance by Design

Anaplan; Greater London; On-site; GBP 75,000 - 115,000; Full time

Job summary

Anaplan, based in London and across the UK, is seeking a Senior GRC Engineer to bridge GRC with engineering teams. You will drive compliance by design, leveraging ISO, SOC, and UK GDPR controls, and implement automation to maintain continuous monitoring and audit readiness.

You’ll collaborate with engineering and risk teams to evolve our control framework, develop crosswalk mappings, and ensure clear, practical guidance for teams and customers alike.

Qualifications

• Extensive commercial experience in security engineering, GRC, DevSecOps, or a closely related technical role.
• Ability to write scripts or light code (Python, Bash, or similar) to automate tasks.
• Knowledge of two or more frameworks (ISO 27001 family, SOC 1/2, UK GDPR, Cyber Essentials) and crosswalks.
• Experience creating and reading system/data-flow diagrams and using GRC platforms (Drata, Vanta, Hyperproof, etc.).
• Ability translate compliance and risk requirements into engineering guidance and implementations.
• Comfort engaging with engineers and customers on technical topics; building tooling and processes.

Responsibilities

• Act as a technical GRC partner translating requirements into implementation details.
• Use cross-framework crosswalk to identify synergies across certifications.
• Support customer-facing security/compliance conversations requiring technical context.
• Build processes, scripts, workflows, and tooling embedding controls into daily operations.
• Create diagrams and documentation to explain controls and obligations to partners.
• Collaborate with Risk Management to incorporate monitoring and risk scoring.

Skills

Security engineering

GRC

DevSecOps

Python/Bash scripting

Control mapping

Stakeholder comms

Tools

Drata

Vanta

Hyperproof

Archer

OneTrust

ServiceNow GRC

Job description

Anaplan, based in London and across the UK, is seeking a Senior GRC Engineer to bridge GRC with engineering teams. You will drive compliance by design, leveraging ISO, SOC, and UK GDPR controls, and implement automation to maintain continuous monitoring and audit readiness.

You’ll collaborate with engineering and risk teams to evolve our control framework, develop crosswalk mappings, and ensure clear, practical guidance for teams and customers alike.