# Security Audit & Controls, Security GRC

**Company**: Anthropic
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $270,000-$345,000 USD
**Category**: IT
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q116758847

**Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5436826008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_00aa74cd-263

## Description

## About the Role

As part of the Security Audit & Controls team, you will own the Common Control Framework (CCF) across every control domain. This involves managing controls, ensuring they are accurate, tested, and trusted by auditors and engineers.

### Key Responsibilities

- Own the Common Control Framework, including its mappings to various frameworks and commitments.

- Draft and validate control descriptions and activities with control owners.

- Design and run continuous monitoring of control efficacy.

- Verify remediation and carry it into steady state.

- Map new frameworks and commitments onto the CCF.

- Support the integrated audit and customer audits.

- Evaluate evidence reliability.

- Build with Claude: automate control mapping, evidence testing, and monitoring.

### Minimum Qualifications

- Several years in IT audit, security compliance, or controls assurance.

- Working command of audit mechanics.

- Experience writing control descriptions and test procedures.

- Experience with continuous controls monitoring or automated evidence collection.

- Technical fluency to read and judge runbooks, configurations, or pipeline definitions.

- Clear writing skills.

- Ability to get control owners and partner teams to prioritize and close work.

### Preferred Qualifications

- Experience designing or rebuilding a common controls framework.

- Experience with continuous controls monitoring or automated evidence programs.

- Experience applying LLMs to assurance work.

- Experience defining or assessing controls for AI systems.

### Logistics

- Education requirements: Bachelor's degree in a related field or equivalent experience.

- Location-based hybrid policy: 25% office time.

- Visa sponsorship: Available.

The annual compensation range for this role is $270,000-$345,000 USD.

## Skills

### Required
- IT audit
- security compliance
- controls assurance
- audit mechanics
- control descriptions
- continuous controls monitoring
- automated evidence collection
- technical fluency
- clear writing

### Nice to have
- common controls framework
- LLMs
- AI systems

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5436826008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)
