jobapplier

Security Risk & Compliance (Data Centers & Compute)

Anthropic

Skills

Required

  • privacy
  • cloud-native
  • multi-cloud and hybrid architectures
  • GRC
  • AI/ML
  • model development
  • deployment

Preferred

  • cloud security controls
  • physical security requirements
  • CISA / CRISC / CISM / CISSP / ISO 27001

Anthropic, a leading AI safety and research company, as a member of our Security Risk & Compliance team. In this role, you will be responsible for understanding and implementing security and AI safety expectations, providing direction to internal partners, and assuring regulators and customers that those expectations are met.

This is a unique opportunity to work at the forefront of AI safety and compliance.

Responsibilities

  • You will build scalable processes and documentation systems, assess and mitigate security risks, coordinate engagements with independent assessors, and maintain and enhance Anthropic's system of security controls.
  • Comprendre les attentes en matière de sécurité et de conformité, et fournir des orientations aux partenaires internes.
  • Assurer la conformité aux exigences de sécurité et de confidentialité, et coordonner les engagements avec les évaluateurs indépendants.
  • Écrire, mettre à jour et mettre en œuvre des politiques capturant les exigences en matière de sécurité, de confidentialité et de sécurité de l'IA.
  • Are comfortable organizing time-bounded task management of delegated work streams across a diverse organization
  • Are energized by being the subject matter expert who educates the organization on new compliance requirements and auditors on current security practices
  • Write clear and useful security and privacy documentation for both external and internal audiences
  • Can translate complex compliance requirements into actionable workstreams for technical and non-technical stakeholders
  • Thrive in ambiguous, fast-paced environments where you'll need to build processes from scratch

Requirements

  • Have 8+ years of progressive experience in audit and compliance roles, with direct ownership of certification/attestation or security compliance implementation projects
  • Have worked in cloud-native environments and understand security and privacy considerations for multi-cloud and hybrid architectures
  • Have integrated with common controls frameworks or GRC systems that scaled with organizational growth
  • Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
  • Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position
  • Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
  • We encourage you to apply even if you do not believe you meet every single qualification
  • Have worked in AI/ML companies and understand unique security considerations for model development and deployment

Preferred

  • Have worked with cloud companies and understand cloud security controls and physical security requirements
  • Bring experience from high-growth technology companies managing rapid compliance expansion
  • Have some experience implementing automated enforcement of security controls (i.e., compliance as code)
  • Possess relevant certifications (CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor/Implementer)

Pay

USD 270,000 - 345,000