Anthropic
Controls Specialist, Security GRC
$270K–$345K
San Francisco, CA +3 · Full-time · Posted Sep 29, 2026
- Location
- San Francisco, CA
New York City, NY
Seattle, WA
San Francisco, California, United States - Experience
- Several years in IT audit, security compliance, or controls assurance; exact years vary with internal job level. Prior AI-industry experience is not required.
- Education
- Bachelor’s degree in a related field or equivalent experience; also described as a Bachelor’s degree or an equivalent combination of education, training, and/or experience. Relevant field demonstrated through coursework, training, or professional experience.
- Visa sponsorship
- Visa sponsorship is available, but not for every role or candidate; if an offer is made, Anthropic will make every reasonable effort to obtain a visa and provides an immigration lawyer.
About the job
Own Anthropic’s Common Control Framework and assurance program, including control mapping, continuous effectiveness monitoring, remediation verification, and audit readiness.
What you'll do
- Maintain the Common Control Framework, its mappings to standards and commitments, and the process for changing controls.
- Design continuous monitoring and evidence processes; assess evidence reliability and verify remediation with control owners.
- Support integrated and customer audits, framework assessments, and Claude-assisted control drafting, mapping, testing, and monitoring.
What they ask for
- Several years in IT audit, security compliance, or controls assurance, including hands-on ownership of a control framework or library across multiple frameworks.
- Working command of audit mechanics, including scoping, walkthroughs, sampling, effectiveness testing, deficiency evaluation, and evidence reliability.
- Experience writing control descriptions, activities, and test procedures, and with continuous monitoring or automated evidence collection.
- Technical fluency to assess whether runbooks, configurations, or pipeline definitions enforce written controls; clear writing and ability to drive work across teams.
Nice to have
- Designed or rebuilt a common controls framework, or established continuous monitoring or automated evidence programs.
- Applied LLMs to assurance work, assessed controls for AI systems, or contributed requirements to a homegrown GRC platform.
Pay
$270,000 — $345,000 USD annual base salary
Tools
Claude, SOC 2, ISO 27001/42001, HIPAA, FedRAMP
AI focus
Use Claude and LLMs to draft and map controls, test evidence, and monitor control health; verify machine-generated control language and assess AI-generated evidence, keeping human judgment in the loop.
Model-written summary · the original posting is authoritative