Senior GRC Engineer

Senior GRC Engineer in Anaplan's Security Trust & Risk group, which covers governance, risk, compliance, vendor and customer assurance, and business continuity. The engineer works to make compliance continuous instead of a scramble before each audit, using a cross-framework control crosswalk so teams satisfy ISO 27001 and its extensions, SOC 1/2, Cyber Essentials, ENS and TX-RAMP with one shared control. That means building scripts, workflows and monitoring that keep control and risk data current, explaining to engineers why each control exists, and joining customer calls that need technical depth.

The team wants six or more years in security engineering, GRC or DevSecOps, scripting in Python or Bash, and a GRC platform such as Drata, Vanta or Archer. Hybrid, two office days a week in New York.