9 hours ago
Base Salary
$181k - $244k/yr
Responsibilities
- Partner with technical and non-technical teams to translate compliance, governance, and risk requirements into implementation details.
- Use cross-framework control mapping to identify shared requirements and reduce duplicated engineering effort.
- Support customer-facing security and compliance discussions involving platform architecture and control implementation.
- Build scripts, workflows, processes, and tooling for continuous evidence collection, control operation, compliance data, and risk monitoring.
- Create documentation, knowledge-sharing resources, and system or data-flow diagrams explaining control rationale and implementation.
- Partner with Risk Management on risk identification, scoring, monitoring, and continuous monitoring across Compliance, Risk, and Governance.
- Develop working knowledge of the Anaplan product, platform, infrastructure, and internal systems.
Requirements
- 6+ years of experience in security engineering, GRC, DevSecOps, or a closely related technical role.
- Hands-on exposure to compliance and regulatory frameworks, with working knowledge of at least two relevant frameworks such as ISO 27001 extensions, SOC 1/2, or Cyber Essentials.
- Ability to write scripts or light code in Python, Bash, or similar languages for evidence collection, reporting, or monitoring automation.
- Experience using cross-framework control mapping or crosswalks to reduce duplicate implementation work.
- Ability to build and interpret system and data-flow diagrams.
- Proficiency with a GRC or risk platform such as Drata, Vanta, Hyperproof, Archer, OneTrust, or ServiceNow GRC.
- Experience translating compliance and risk requirements into actionable engineering guidance.
- Ability to engage directly with engineering teams and customers on technical topics and build processes and tooling in a growing function.
- Preferred experience includes applying AI/LLM tooling to operational workflows, OSCAL or similar machine-readable control languages, FAIR or similar risk scoring, FedRAMP, HIPAA/HITRUST, external audits, or related certifications such as CISA, CISSP, or ISO 27001 Lead Implementer.
Benefits
- The role is based in the New York office and requires hybrid in-person attendance twice per week.
- Anaplan provides reasonable accommodation for individuals with disabilities and emphasizes diversity, equity, inclusion, and belonging.
About Anaplan
Anaplan builds a cloud platform for enterprise planning, forecasting, and scenario modeling used by finance, supply chain, sales, and workforce teams. It sells subscription software and related services to large organizations that need connected, cross-functional planning. Founded in 2006 and headquartered in Miami, Florida, Anaplan was acquired by Thoma Bravo in 2022 after previously trading on the NYSE.