Security Controls Assurance Lead

Overview

Security Controls Assurance Lead for Anthropic’s Security Governance, Risk, and Compliance (GRC) team, defining control requirements for compliance obligations and validating control effectiveness across the software development lifecycle.

What you'll do

• Define control framework and requirements, including change review/approvals and evidence collection.
• Assess control implementations against defined requirements.
• Validate that shipped systems meet control requirements and acceptance criteria.
• Pressure-test major infrastructure/system/agent framework changes for control impact.
• Establish validation, evidence, and governance standards for AI-performed and AI-assisted controls.
• Stand up or advise audit workflows such as Claude-driven control testing and automated evidence collection.
• Evaluate new compliance frameworks or scope changes for their impact on control design and engineering effort.

What you'll need

• Experience supporting technology control programs through SOX readiness or in public-company or equivalent environments (e.g., FedRAMP, large multi-framework SOC 2/ISO portfolios).
• Engineering fluency to read code and Terraform and follow CI/CD pipelines end to end.
• Ability to challenge designs on technical merits.
• Programming skills in Python or at least one systems language such as Go, Rust, or C/C++.
• Deep familiarity with developer platform, release engineering, or infrastructure control domains.
• Strong collaboration and communication skills.
• Use Claude and other LLMs as daily working tools and have specific views on AI audit/assurance workflows.
• Ability to translate framework/regulatory language into engineerable acceptance criteria and back into assurance language.

Details

• Annual compensation range: $270,000–$345,000 USD.
• Location-based hybrid policy: expects staff in one of the offices at least 25% of the time.
• Visa sponsorship is available, but not guaranteed for every role and candidate.