Audit, Security GRC

Helps run Anthropic's integrated security audit program from the Audit and Assurance group within Security GRC, which also maintains the Common Control Framework. The role coordinates quarterly audits across SOC 2, HIPAA, ISO 27001, ISO 42001 and the company's other certifications, working with audit firms, GRC partners and control owners, and plans the audits added as Anthropic enters new frameworks, platforms and regions.

The job covers readiness, scoping with product and engineering, findings closeout, gap assessments with effort estimates, and automating evidence so it is gathered once and reused, often by building with Claude. It suits someone with several years of programme management and of external SOC 2 and ISO 27001 audits, technical fluency in cloud evidence, and clear writing.