US Public Sector Compliance, Security GRC

Job Description

You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements).

Key Responsibilities

• Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications)
• Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work
• Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod
• Translate government obligations into partner team requirements
• Answer public sector customer and deal questions
• Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status
• Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record

Minimum Qualifications

• Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP)
• Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization
• Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back
• Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary
• Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control
• Clear writing
• Ability to get partner teams to prioritize and close compliance work without authority over them

Preferred Qualifications

• Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks
• Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor
• Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection
• Hold or are eligible for a US security clearance
• Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS

Logistics

The annual compensation range for this role is $255,000-$270,000 USD.