Anthropic

Anthropic

US Public Sector Compliance, Security GRC

San Francisco, CA | New York City, NY

No sponsorship$171k-$800kDetected 11 days ago
NLPLLMsCybersecurityLogisticsResearchLeadershipCommunicationCISSP

Stay score

odds of building a lasting career here

64Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Answer public sector customer and deal questions (what a boundary allows, CUI, IRS Publication 1075, CJIS, ITAR), and handle questionnaires and RFIs until they move to Customer Trust
  • Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments.
  • We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them.

Responsibilities

  • Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work
  • Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod
  • Translate government obligations into partner team requirements, for example vulnerability SLAs in our internal vulnerability reporting platform, and review the evidence
  • Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status
  • Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record
  • We think AI systems like the ones we're building have enormous social and ethical implications.

Requirements

  • Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back
  • Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary
  • Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
  • Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position
  • Years of experience required will correlate with the internal job level requirements for the position

Nice to have

  • Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks
  • Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor
  • Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection
  • Hold or are eligible for a US security clearance
  • Have done everything on this list or worked every regime.
  • The scarce combination is running a government authorization on its recurring cycle plus the judgment to tell whether a control actually works
  • Write production code.
  • The bar is fluency sufficient to read, query and challenge

Compensation

  • $255,000 - $270,000 USD
  • Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications), starting with C4G on Palantir FedStart and the NIST SP 800-171 assessment with Schellman

Company info

  • We're building toward a fundamentally different kind of GRC:
  • one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits.
  • Within Security GRC, Compliance and Audit Programs (CAP) runs the integrated audit across our frameworks and maintains the Common Control Framework the program hangs off.
  • This role sits in Compliance & Audit Programs and works one regime family, US public sector, from requirements through authorization and ongoing compliance, working alongside the public sector engineering pods rather than downstream of them.

Visa & Work Authorization

  • We do sponsor visas!
  • However, we aren't able to successfully sponsor visas for every role and every candidate.
  • But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
Apply directly at Anthropic →Create a free account for alerts like thisView Anthropic immigration profile

This listing is sourced directly from Anthropic's careers page and normalized into a canonical job model.