Audit, Security GRC

Job Overview

You'll help run Anthropic's unified audit program, focusing on quarterly audits across SOC 2, HIPAA, and the ISO 27000 family, including ISO 42001. This involves planning new audits, assessing framework and scope changes, and driving automation in the program.

Key Responsibilities

• Run the integrated audit program across multiple frameworks
• Plan and execute quarterly audits, from scoping to report closeout
• Ensure audit readiness through control owner preparation and evidence pre-checks
• Collaborate with Product and Engineering to define audit scopes
• Develop and maintain the audit operating model and runbook
• Drive automation in evidence collection and audit reporting
• Coordinate with GRC Partners and control owners
• Manage auditor relationships and report program metrics

Requirements

• Program management experience with multi-workstream programs
• Experience with external security audits (SOC 2, ISO 27001)
• Knowledge of SOC 2, ISO 27000 family, ISO 42001, and HIPAA
• Experience with gap assessments and audit process improvement
• Technical fluency for understanding evidence in cloud environments
• Clear writing and coordination skills under deadlines

Preferred Qualifications

• Audit firm experience (Big 4 or SOC 2/ISO certification body)
• Experience with additional frameworks (PCI DSS, ISO 27701, etc.)
• Automated evidence collection or audit reporting experience
• Experience with GRC platforms or internal tooling

Logistics

• Annual salary: $255,000-$270,000 USD
• Hybrid work policy: 25% office time
• Visa sponsorship available

Company Culture

Anthropic values impact, collaboration, and communication skills, focusing on big science and empirical AI research.