Anthropic

US Public Sector Compliance, Security GRC

San Francisco, CA | New York City, NY. Posted a month ago

The role

You will drive compliance programs for US government authorizations including FedRAMP, DoD, and state and local requirements. You will translate government obligations into technical requirements and manage recurring compliance cycles.

What you will do

  • Run recurring compliance cycles for US government authorizations
  • Co-own FedRAMP 20x work for Claude Enterprise
  • Help build new authorizations like FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP
  • Support model authorizations in GovCloud and Vertex
  • Translate government obligations into partner team requirements
  • Answer public sector customer and deal questions
  • Map US government requirements onto the Common Control Framework
  • Build with Claude to automate mapping, evidence collection and reporting

Required qualifications

  • Several years in security compliance or IT audit with hands-on US government compliance for a cloud service
  • Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization
  • Experience writing requirements for engineering teams from a control baseline and reviewing evidence
  • Working knowledge of how a GovCloud or Vertex style government region differs from commercial
  • Technical fluency to read a runbook, configuration or pipeline definition
  • Clear writing
  • Ability to get partner teams to prioritize and close compliance work without authority over them
  • Bachelor’s degree or an equivalent combination of education, training, and/or experience
  • Field of study relevant to the role as demonstrated through coursework, training, or professional experience

Nice to have

  • Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks
  • Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor
  • Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection
  • Hold or are eligible for a US security clearance
  • Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS
  • CISSP, CISA, CGRC or similar

Benefits

  • Competitive compensation and benefits
  • Optional equity donation matching
  • Generous vacation and parental leave
  • Flexible working hours
  • Office space

Before you apply

  • We do sponsor visas

About the company

Anthropic is a public benefit corporation headquartered in San Francisco. Its mission is to create reliable, interpretable, and steerable AI systems.

US Public Sector Compliance, Security GRC at Anthropic | JobZoey