Security GRC Specialist, Customer Trust

Anthropic•San Francisco, CA

67d•Hybrid

About The Position

Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. As part of the Anthropic security department, the compliance team owns understanding security and AI safety expectations, as established by regulators, customers and (nascent) industry norms (which we also seek to influence). The compliance team uses this understanding to provide direction to internal partners on the priorities of security and safety requirements they must meet. The compliance team assures regulators and customers that those expectations are met by earning security credentials and responding to direct inquiry about Anthropics security program from auditors, customers and partners. This opportunity is unique, as we work to secure today's most novel and valuable asset types, we must build a new kind of compliance program, assuring the safety of artificial intelligence capabilities.

Requirements

Have 8+ years of progressive experience in compliance, audit, and customer trust roles, with direct ownership of building or scaling customer-facing security operations from early-stage through high-growth
Have strong customer-facing expertise with proven success managing security audits, questionnaires, and building trust with enterprise customers
Are entrepreneurial with strong operational instincts - you identify broken processes, envision scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality
Have managed high volumes of customer security requests in cloud-native, multi-cloud environments and understand what "good" looks like at scale
Are comfortable organizing delegated workstreams across diverse teams and managing time-bounded deliverables

Nice To Haves

Have worked in AI/ML companies and understand unique security considerations for model development and deployment
Bring experience from high-growth technology companies managing rapid compliance expansion
Bring experience implementing trust automation platforms or building internal automation for questionnaire management
Possess relevant certifications (CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor/Implementer)

Responsibilities

Build and scale Anthropic's Customer Trust function, establishing processes, tooling, and team structure to support enterprise customer requirements
Experiment with and implement automation solutions to streamline customer due diligence, improve response times, and scale operations as customer volume grows
Establish and lead the Customer Audit function, creating scalable processes to efficiently manage incoming customer security assessments, audits, and contract reviews
Define metrics and reporting frameworks to track team performance, customer satisfaction, and operational efficiency
Understand how Anthropic's security and privacy capabilities across major cloud platforms implement common frameworks (e.g., NIST 800-53, NIST 800-171, ISO 27001, ISO 27701, CSA CCM, and SOC 2)