Anthropic

Supplier Security & Assurance, Security GRC

San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC. Posted a month ago

The role

You will run end to end supplier security assessments by reviewing evidence and determining risk. You will also manage supplier issues, perform continuous monitoring, and help shape the program's tooling and requirements.

What you will do

  • Run supplier security assessments by reviewing agent-prefilled outputs and evaluating vendor controls
  • Operate supplier issue management and risk treatment
  • Run continuous monitoring after approval
  • Identify gaps in coverage, questionnaires, requirements, and tooling to improve the program
  • Tune and maintain the Claude-powered assessment platform
  • Contribute to KPI and KRI reporting

Required qualifications

  • Experience running supplier security assessments end to end at a technology company
  • Working knowledge of risk fundamentals
  • Ability to assess a vendor across security domains
  • Track record of driving risk treatment to closure through influence
  • Experience building or tuning an LLM-backed workflow, agent, or automation in a risk, compliance, or operations context
  • Experience building or operating issue management workflows
  • Working technical knowledge of SaaS security configuration
  • Working technical knowledge of standard vendor security contract terms
  • Ability to read a SOC 2 report or penetration test and turn it into findings
  • Bachelor’s degree or an equivalent combination of education, training, and/or experience
  • Field of study relevant to the role as demonstrated through coursework, training, or professional experience

Nice to have

  • Experience assessing cloud infrastructure, data center, or data-pipeline vendors
  • Experience supporting SOX, SOC 2, or ISO 27001 third party or vendor management controls
  • Experience assessing human data operations or data labeling vendors, hardware suppliers, compute providers and neoclouds
  • Experience with post-approval supplier continuous monitoring

Benefits

  • Competitive compensation
  • Optional equity donation matching
  • Generous vacation
  • Parental leave
  • Flexible working hours
  • Office space

Before you apply

  • We do sponsor visas

About the company

Anthropic is a public benefit corporation headquartered in San Francisco. Its mission is to create reliable, interpretable, and steerable AI systems.

Supplier Security & Assurance, Security GRC at Anthropic | JobZoey