# US Public Sector Compliance, Security GRC

**Company**: Anthropic
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $255,000-$270,000 USD
**Category**: IT
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q116758847

**Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5443900008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8c53bf06-a23

## Description

## Job Description

You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements).

You'll own the recurring cycles those authorizations run on (continuous monitoring, POA&M, annual assessments, significant changes), help build new authorizations as we add them, and keep every frontier model's authorizations current.

You'll turn government requirements into specific, testable requirements that engineering teams build against, review the evidence that comes back, and say so when a launch is not ready for a government boundary.

You'll map US government requirements onto our Common Control Framework so the public sector view and the integrated audit view of the same control stay one framework.

Building with Claude is a normal part of the job: mapping, evidence collection and reporting, with you deciding where human judgment stays in the loop.

This is an individual contributor role, working closely with a peer on US public sector compliance, for someone who works well independently, writes clearly, and gets satisfaction from a government authorization that holds up as the product changes underneath it.

## Key Responsibilities

- Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications)

- Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work

- Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod

- Translate government obligations into partner team requirements

- Answer public sector customer and deal questions

- Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status

- Build with Claude: automate mapping, evidence collection and reporting

## Minimum Qualifications

- Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP)

- Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization

- Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back

- Working knowledge of how a GovCloud or Vertex style government region differs from commercial

- Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control

- Clear writing

- Ability to get partner teams to prioritize and close compliance work without authority over them

## Preferred Qualifications

- Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks

- Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor

- Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection

- Hold or are eligible for a US security clearance

- Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS

## Logistics

- Annual Salary: $255,000-$270,000 USD

- Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience

- Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

- Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

- Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time.

- Visa sponsorship: We do sponsor visas!

## Skills

### Required
- FedRAMP
- DoD impact levels
- CMMC
- NIST SP 800-171
- StateRAMP
- TX-RAMP
- Compliance
- Audit
- GRC
- Claude

### Nice to have
- LLMs
- FedRAMP 20x
- machine-readable evidence
- US security clearance
- IRS Publication 1075
- CJIS

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5443900008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)