255K–270K USD / year
Audit, Security GRC
OtherHybrid — San Francisco, CA, Seattle, WA, New York City, NY, Washington, DC
Published on 2026-10-19
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Help run Anthropic’s integrated security audit program across SOC 2, HIPAA, ISO 27000-family standards, and other certifications. The role combines audit program management, readiness and gap assessments, auditor coordination, and automation to make evidence collection and audit cycles more efficient.
About the company
Anthropic builds reliable and interpretable AI systems, including the Claude family of models, for businesses and developers. The company focuses on AI safety research and practical AI assistants for enterprise and consumer use.
The team
Security Governance, Risk, and Compliance (GRC), within Audit & Assurance.
What you'll do
- Manage an integrated audit calendar, milestones, dependencies, risks, and leadership status reporting
- Plan and run quarterly audits from scoping through reporting and findings closeout
- Prepare control owners for fieldwork with readiness checks, evidence pre-checks, and walkthroughs
- Define audit scope with Product and Engineering and assess impacts from launches or new platforms
- Develop and maintain the unified audit operating model and runbook
- Coordinate auditors, control owners, and GRC Partners; track evidence delivery and remediation
- Automate evidence collection, request tracking, and audit reporting with GRC Engineering
- Evaluate new frameworks and scope expansions, and present gap assessments and effort estimates
What we're looking for
- Several years of program management across multiple workstreams
- Several years running external security audits, including SOC 2 and ISO 27001
- Working knowledge of SOC 2, the ISO 27000 family, ISO 42001, and HIPAA
- Experience leading framework or scope gap assessments and presenting findings to leadership
- Experience building or improving audit processes, calendars, request tracking, and runbooks
- Technical fluency to assess cloud evidence and build simple automations with Claude
- Clear writing and calm coordination under deadline pressure
- Ability to secure timely contributions from control owners without direct authority
Nice to have
- Audit firm experience, especially as a senior or manager on technology clients
- Experience with PCI DSS, ISO 27701, ISO 27018, CSA STAR, IRAP, ISMAP, or C5
- Experience automating evidence collection or audit reporting, or using Claude or other LLMs for program work
- Experience with a GRC platform or lightweight internal tooling
- CISA, CISSP, ISO 27001 Lead Auditor, or similar certification