← All roles

US Public Sector Compliance, Security GRC

Anthropic· Security
Apply on company site
Hybrid (San Francisco, CA), Hybrid (New York City, NY)$255k - $270kfull-timePosted 2w ago

About the role

Role within Anthropic's Security GRC team focused on US government authorizations (FedRAMP, DoD, StateRAMP/TX-RAMP), translating government requirements into engineering-ready controls, managing recurring compliance cycles, and supporting model authorizations.

Responsibilities

  • Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications), starting with C4G on Palantir FedStart and the NIST SP 800-171 assessment with Schellman
  • Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work
  • Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod
  • Translate government obligations into partner team requirements, for example vulnerability SLAs in our internal vulnerability reporting platform, and review the evidence
  • Answer public sector customer and deal questions (what a boundary allows, CUI, IRS Publication 1075, CJIS, ITAR), and handle questionnaires and RFIs until they move to Customer Trust
  • Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status
  • Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record

Qualifications

  • Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP), including the ongoing compliance cycle after authorization
  • Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization: boundary definition, control implementation statements, assessment, continuous monitoring, POA&M and significant change
  • Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back
  • Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary
  • Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control
  • Clear writing, because implementation statements and status reports are what assessors, engineers and leadership work from
  • Ability to get partner teams to prioritize and close compliance work without authority over them

Skills

Required:Security compliance and IT audit (US government)NIST SP 800-53 ModerateRequirements writing for engineeringGovCloud/Vertex compliance knowledgeReading/runbooks/configurations for controlsClear technical writingCross-team stakeholder management without formal authority

Benefits

  • Competitive compensation and benefits
  • Optional equity donation matching
  • Generous vacation and parental leave
  • Flexible working hours
  • Office space for collaboration
Last updated Oct 7, 2026. Interested? Apply on the company site.

About Anthropic

building reliable, interpretable, and steerable AI systems

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

ai-infrastructure-and-developmentliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anthropic