Security Controls Assurance Lead

Anthropic is a public benefit corporation headquartered in San Francisco, focused on creating reliable, interpretable, and steerable AI systems. The Security Governance, Risk, and Compliance (GRC) team is building a trust engine that directs Claude to challenge and evidence control performance continuously.

As the Security Controls Assurance Lead, you will define control requirements and acceptance criteria for global compliance obligations (SOC 2, ISO 27001/42001, HIPAA, public sector) across the software development lifecycle, pair with engineering to implement them, and validate that shipped systems meet the bar.

• Define the control framework for autonomous AI operators, including change review, human-in-the-loop, and evidence collection.
• Pressure-test major infrastructure, system, and agent framework changes for control impact during design.
• Set compliance bar for home-built systems, including auditability, segregation of duties, and change control.
• Define criteria for AI to operate, supplement, or replace manual processes, including human-in-the-loop thresholds.
• Establish validation, evidence, and governance standards for AI-performed controls to withstand external audit.
• Assess new compliance frameworks and scope changes, providing technical and compliance lens.
• Stand up or advise on audit workflows, including Claude-driven control testing and automated evidence collection.

• Thrive at hypergrowth pace, comfortable with incomplete information.
• Supported technology control programs through SOX readiness or equivalent rigor (FedRAMP, large multi-framework SOC 2/ISO portfolios).
• Engineering fluency: can read code and Terraform, follow CI/CD pipelines, challenge designs.
• Programming skills in Python or a systems language (Go, Rust, C/C++).
• Deep familiarity with developer platform, release engineering, or infrastructure control domains.
• Strong collaborator and communicator; use Claude and other LLMs daily.
• Translate framework language into acceptance criteria and engineering reality into assurance language.

• Audit or advisory experience (Big 4) with in-house experience at an AI-forward tech company.
• Defined or assessed controls for AI/ML systems or agents in production.
• Stood up continuous controls monitoring or automated evidence programs.

Annual salary: $270,000—$345,000 USD.

Bachelor’s degree or equivalent. Location-based hybrid policy: all staff in office at least 25% of the time. Visa sponsorship is available.