Security Audit & Controls

About this role

This role involves owning the Common Control Framework across various domains and ensuring compliance with multiple regulations and standards. The position emphasizes continuous monitoring of controls and working with GRC partners to validate control effectiveness and evidence reliability.

About the company

Anthropic builds reliable and interpretable AI systems, including the Claude family of models, for businesses and developers. The company focuses on AI safety research and practical AI assistants for enterprise and consumer use.

The team

Security Governance, Risk, and Compliance (GRC) team

What you'll do

• Own the Common Control Framework and its mappings
• Draft and validate control descriptions with control owners
• Design and run continuous monitoring of control efficacy
• Verify remediation and carry it into steady state
• Map new frameworks onto the CCF
• Support integrated and customer audits
• Evaluate evidence reliability
• Build with Claude for automation

What we're looking for

• Hands-on ownership of a control framework across multiple frameworks
• Working command of audit mechanics
• Experience writing control descriptions and test procedures
• Experience with continuous controls monitoring
• Technical fluency to assess control enforcement
• Clear writing and communication skills
• Ability to prioritize work with control owners without authority

Nice to have

• Designed or rebuilt a common controls framework
• Led continuous controls monitoring or automated evidence programs
• Applied LLMs to assurance work
• Defined controls for AI systems
• Provided requirements for a GRC platform

Benefits

• Competitive compensation
• Generous vacation and parental leave
• Flexible working hours
• Office space for collaboration