← All roles

Supplier Security & Assurance, Security GRC

Anthropic· Security
Apply on company site
San Francisco, CA, Seattle, WA, New York City, NY, Washington, DC$255k - $270kFull-timePosted 4w ago

About the role

Anthropic's Supplier Security & Assurance (SSA) team within Security GRC assesses and manages the security of Anthropic's suppliers, driving end-to-end supplier security assessments, remediation, and continuous monitoring to support risk-based decision making for vendor relationships.

Responsibilities

  • Run supplier security assessments: review agent-prefilled outputs, evaluate vendor controls and evidence, determine residual risk, route to domain reviewers where deeper assessment is warranted
  • Operate supplier issue management and risk treatment: document findings with severity, owner, and due date; drive remediation with vendor and business owner; record risk acceptances; roll open issues up to the risk register
  • Run continuous monitoring after approval: reopen assessments on defined triggers, investigate SaaS configuration, data and use case drift signals, queue reassessment if vendor scope changes
  • Improve the program: identify gaps in coverage, questionnaires, requirements, and tooling; propose fixes; carry roadmap items to mature supplier security
  • Tune and maintain Claude-powered assessment platform: prompt development, questionnaire/assessment design, calibration against assessor decisions, output QA
  • Contribute to KPI and KRI reporting on coverage, cycle time, residual risk, open issues, and reassessments

Qualifications

  • Experience running supplier security assessments end to end at a technology company: scoping the engagement, determining inherent risk, reviewing controls and evidence, documenting residual risk, and driving findings to closure
  • Working knowledge of risk fundamentals (inherent and residual risk, control effectiveness, compensating controls, risk acceptance) and the judgment to apply them when evidence is incomplete
  • Ability to assess a vendor across security domains and determine closure versus specialist input
  • Track record of driving risk treatment to closure through influence across teams
  • Experience building or tuning an LLM-backed workflow, agent, or automation in risk/compliance/operations contexts
  • Experience building or operating issue management workflows: logging issues with owner and due date, tracking remediation, escalation
  • Working technical knowledge of SaaS security configuration and standard vendor security contract terms (DPA, incident notification, subprocessors, audit/testing rights)
  • Ability to read SOC 2 reports or penetration tests and turn into findings; map user entity controls; judge evidence

Skills

Required:Supplier security assessment executionRisk fundamentalsVendor assessment across security domainsIssue management & risk treatment workflowsLLM-backed workflow tooling

Benefits

  • Competitive compensation and benefits
  • Optional equity donation matching
  • Generous vacation and parental leave
  • Flexible working hours
  • Office space for collaboration
Last updated Sep 23, 2026. Interested? Apply on the company site.

About Anthropic

building reliable, interpretable, and steerable AI systems

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

ai-infrastructure-and-developmentliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anthropic