The opportunity
Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them.
What you'll do
Run the recurring compliance cycles for our US government authorizations: (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications), starting with C4G on Palantir FedStart and the NIST SP 800-171 assessment with Schellman
Co-own FedRAMP 20x work for Claude Enterprise, and help build new: authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work
Support model authorizations in GovCloud and Vertex for every model launch,: as the GRC member of the Inference and model delivery pod
Translate government obligations into partner team requirements, for example: vulnerability SLAs in our internal vulnerability reporting platform, and review the evidence
Answer public sector customer and deal questions (what a boundary allows,: CUI, IRS Publication 1075, CJIS, ITAR), and handle questionnaires and RFIs until they move to Customer Trust
Map US government requirements onto the Common Control Framework with the: Controls Assurance Lead and keep one source of truth for status
What they're looking for
- Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks
- Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor
- Have applied LLMs to compliance work such as control mapping, evidence: testing or continuous evidence collection
- Hold or are eligible for a US security clearance
- Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS
