Anthropic
Audit, Security GRC
$255K–$270K
San Francisco, CA +4 · Full-time · Posted Oct 19, 2026
- Location
- San Francisco, CA
Seattle, WA
New York City, NY
Washington, DC
San Francisco, California, United States - Experience
- Several years of program management and several years running external security audits. The posting does not specify a fixed number; years required correlate with internal job level.
- Education
- Bachelor’s degree or an equivalent combination of education, training, and/or experience; relevant field demonstrated through coursework, training, or professional experience.
- Visa sponsorship
- Visa sponsorship is available, but not for every role or candidate; if an offer is made, Anthropic will make every reasonable effort to obtain a visa and provides an immigration lawyer.
About the job
Runs Anthropic’s integrated security audit program, coordinating recurring audits, audit expansions, readiness, findings, and process automation across frameworks.
What you'll do
- Plan and run quarterly audits, including scoping, readiness, fieldwork coordination, reporting, and findings closeout.
- Manage the integrated audit calendar, auditor and control-owner relationships, and framework or scope expansion assessments.
- Improve the audit operating model and automate evidence collection, request tracking, and reporting, using Claude where appropriate.
What they ask for
- Several years of program management running multi-workstream programs, with plans, milestones, dependencies, risk tracking, and leadership reporting.
- Several years running external security audits, including SOC 2 and ISO 27001 at minimum.
- Working knowledge of SOC 2, the ISO 27000 family, ISO 42001, and HIPAA, including overlap between requirements.
- Experience leading a framework or scope-change gap assessment and presenting results to leadership; experience building or improving an audit process.
Nice to have
- Audit firm experience, particularly as a senior or manager on technology clients.
- Experience automating evidence collection or audit reporting, using a GRC platform, or building lightweight internal tooling.
Pay
$255,000 — $270,000 USD (base salary)
Tools
SOC 2, ISO 27001, ISO 27000, ISO 42001, HIPAA, Claude, GRC platform
AI focus
Build simple automations with Claude and drive automated evidence generation and collection; decide where human judgment stays in the loop.
Model-written summary · the original posting is authoritative