# Audit, Security GRC

**Company**: Anthropic
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $255,000-$270,000 USD
**Category**: IT
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q116758847

**Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5457137008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_e20aa3ea-53f

## Description

## Job Overview

You'll help run Anthropic's unified audit program, focusing on quarterly audits across SOC 2, HIPAA, and the ISO 27000 family, including ISO 42001. This involves planning new audits, assessing framework and scope changes, and driving automation in the program.

## Key Responsibilities

- Run the integrated audit program across multiple frameworks

- Plan and execute quarterly audits, from scoping to report closeout

- Ensure audit readiness through control owner preparation and evidence pre-checks

- Collaborate with Product and Engineering to define audit scopes

- Develop and maintain the audit operating model and runbook

- Drive automation in evidence collection and audit reporting

- Coordinate with GRC Partners and control owners

- Manage auditor relationships and report program metrics

## Requirements

- Program management experience with multi-workstream programs

- Experience with external security audits (SOC 2, ISO 27001)

- Knowledge of SOC 2, ISO 27000 family, ISO 42001, and HIPAA

- Experience with gap assessments and audit process improvement

- Technical fluency for understanding evidence in cloud environments

- Clear writing and coordination skills under deadlines

## Preferred Qualifications

- Audit firm experience (Big 4 or SOC 2/ISO certification body)

- Experience with additional frameworks (PCI DSS, ISO 27701, etc.)

- Automated evidence collection or audit reporting experience

- Experience with GRC platforms or internal tooling

## Logistics

- Annual salary: $255,000-$270,000 USD

- Hybrid work policy: 25% office time

- Visa sponsorship available

## Company Culture

Anthropic values impact, collaboration, and communication skills, focusing on big science and empirical AI research.

## Skills

### Required
- program management
- external security audits
- SOC 2
- ISO 27001
- gap assessments
- audit process improvement
- cloud environments
- clear writing

### Nice to have
- audit firm experience
- additional frameworks
- automated evidence collection
- GRC platforms

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5457137008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)