← All roles

Security Risk & Compliance, Agent Security

Anthropic· Security
Apply on company site
Hybrid (San Francisco, CA), Hybrid (New York City, NY)$255k - $345kfull-timePosted 2w ago

About the role

Senior security governance, risk, and compliance role focused on agent security governance for AI agents, defining policies, data handling, review criteria, and risk management to ensure auditable controls and regulatory alignment.

Responsibilities

  • Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated
  • Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks
  • Serve as the GRC reviewer within existing engineering approval workflows
  • Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data
  • Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams
  • Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act)
  • Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners
  • Own the policy for agent-related risk acceptances and exceptions, including approval authority, duration and re-review

Qualifications

  • 8+ years in security governance, risk, and compliance, including ownership of security policies and control standards at a technology company
  • Owned or meaningfully supported efforts to compartmentalize sensitive data, PII, or intellectual property, and understand identity and access mechanisms
  • Think about non-human identities as a distinct risk and control category, and can design least-privilege access and accountability controls for systems acting on a person's behalf
  • Reason from a threat model to a control and explain the tradeoff to both an engineer and an auditor
  • Defined risk-based review or approval criteria within engineering workflows and kept them effective under high change velocity
  • Delivered clear, precise written work for both technical and non-technical audiences
  • Thrived in ambiguous environments with no settled industry playbook, proposing standards rather than waiting for one
  • Energized by being the security and risk authority who educates and influences outcomes

Skills

Required:Security policy developmentData governance and least-privilege accessRisk assessment and managementThreat modeling and control designPolicy approvals in engineering workflows

Benefits

  • Competitive compensation
  • Generous vacation and parental leave
  • Flexible working hours
  • Optional equity donation matching
  • Lovely office space
Last updated Oct 7, 2026. Interested? Apply on the company site.

About Anthropic

building reliable, interpretable, and steerable AI systems

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

ai-infrastructure-and-developmentliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anthropic