1 day ago
London, United KingdomSenior
Responsibilities
- Act as a technical GRC partner by translating compliance, governance, and risk requirements into implementation details and participating in architecture and design discussions.
- Use cross-framework control mappings to identify shared requirements and help engineering teams build common solutions rather than duplicate controls.
- Support customer-facing security and compliance discussions involving platform architecture, control implementation, and how obligations are met.
- Build scripts, processes, workflows, and tooling that automate evidence collection and embed controls, risk data, and monitoring into daily operations.
- Create documentation, diagrams, and knowledge-sharing resources explaining the rationale and implementation of controls.
- Partner with Risk Management on risk identification, scoring, monitoring, and continuous monitoring across compliance, risk, and governance.
- Develop working knowledge of the Anaplan product, platform, infrastructure, and internal systems.
Requirements
- Extensive commercial experience in security engineering, GRC, DevSecOps, or a closely related technical role with hands-on compliance or regulatory framework exposure.
- Ability to write scripts or light code in Python, Bash, or similar languages for evidence collection, reporting, or monitoring automation.
- Working knowledge of at least two relevant frameworks, including ISO 27001 and its extensions, SOC 1/2, Cyber Essentials, or UK/EU-relevant frameworks, plus experience with cross-framework control mapping.
- Experience building and interpreting system or data-flow diagrams and proficiency with a GRC or risk platform such as Drata, Vanta, Hyperproof, Archer, OneTrust, or ServiceNow GRC.
- Experience translating compliance and risk requirements into actionable engineering guidance.
- Comfort engaging directly with engineering teams and customers on technical topics and building processes and tooling in a growing function.
- Preferred experience includes applying AI or LLM tooling to operational workflows, using OSCAL or similar machine-readable control languages, and applying FAIR or similar risk-scoring methodologies.
- Experience with FedRAMP, HIPAA, HITRUST, external audits, technical assessment points of contact, or sovereign and regional cloud regimes is a plus.
About Anaplan
Anaplan builds a cloud platform for enterprise planning, forecasting, and scenario modeling used by finance, supply chain, sales, and workforce teams. It sells subscription software and related services to large organizations that need connected, cross-functional planning. Founded in 2006 and headquartered in Miami, Florida, Anaplan was acquired by Thoma Bravo in 2022 after previously trading on the NYSE.