# US Public Sector Compliance, Security GRC

**Company**: Anthropic
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $255,000-$270,000 USD
**Category**: IT
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q116758847

**Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5443900008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_dd1e75f3-f74

## Description

## Job Description

You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements).

## Key Responsibilities

- Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications)

- Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work

- Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod

- Translate government obligations into partner team requirements

- Answer public sector customer and deal questions

- Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status

- Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record

## Minimum Qualifications

- Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP)

- Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization

- Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back

- Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary

- Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control

- Clear writing

- Ability to get partner teams to prioritize and close compliance work without authority over them

## Preferred Qualifications

- Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks

- Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor

- Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection

- Hold or are eligible for a US security clearance

- Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS

## Logistics

The annual compensation range for this role is $255,000-$270,000 USD.

## Skills

### Required
- FedRAMP
- DoD impact levels
- CMMC
- NIST SP 800-171
- StateRAMP
- TX-RAMP
- Compliance
- GRC
- Claude

### Nice to have
- LLMs
- control mapping
- evidence testing
- continuous evidence collection
- US security clearance

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5443900008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)