Security Controls Assurance Lead

About the role

Anthropic is building a next‑generation GRC ecosystem that continuously validates security controls using AI. As the Security Controls Assurance Lead, you will define and enforce control requirements across the software development lifecycle, partnering with engineering to ensure that shipped products meet rigorous compliance standards.

Key responsibilities

• Define control frameworks and requirements for autonomous AI operators in collaboration with Security, Internal Audit, and Engineering.
• Assess infrastructure, system, and agent changes for control impact before implementation.
• Set compliance standards for internally built systems, ensuring auditability, segregation of duties, and change control.
• Establish criteria for AI‑driven processes, including human‑in‑the‑loop thresholds and evidence documentation.
• Develop validation, evidence, and governance standards to withstand external audit and regulatory scrutiny.
• Evaluate new compliance frameworks, regulations, certifications, and product scopes for technical and compliance impact.
• Design and advise on audit workflows, including Claude‑driven control testing and automated evidence collection.

Required profile

• Extensive experience in security governance, risk, and compliance (GRC) within a technology environment.
• Proven ability to translate regulatory and customer obligations into actionable control requirements.
• Strong collaboration skills to work closely with engineering, audit, and security teams.
• Experience designing and validating controls for AI‑enabled systems.

Required skills

• SOC 2 compliance
• ISO 27001 / ISO 42001 standards
• HIPAA regulatory knowledge
• Security controls design and assurance
• GRC frameworks and risk assessment