Security Risk & Compliance, Data Centers & Compute

Details

Anthropic is seeking a security risk and compliance professional to help build and operate a scalable compliance program for data centers, hyperscalers, cloud environments, and AI safety requirements. The role will translate regulatory, customer, and industry expectations into security and privacy controls, documentation, certifications, and operational processes.

Responsibilities

• Understand how Anthropic's security and privacy capabilities across major cloud platforms implement common frameworks, including NIST 800-53, NIST 800-171, ISO 27001, ISO 27701, CSA CCM, and SOC 2.
• Build scalable data center and hyperscaler processes and documentation systems to support expansion into additional geographies and compliance frameworks.
• Assess and mitigate security and operational risks, implement corrective actions, and manage vendor compliance.
• Coordinate engagements with independent assessors to obtain security and privacy certifications and attestations important to customers and enterprise partnerships, as well as to meet regulatory obligations.
• Write, update, and enact policies covering security, privacy, and AI safety requirements.
• Maintain and enhance Anthropic's system of security controls through audit readiness, recordkeeping, and cross-functional communication.

Requirements

• 8+ years of progressive experience in audit and compliance roles, with direct ownership of certification, attestation, or security compliance implementation projects.
• Experience working in cloud-native environments, with an understanding of security and privacy considerations for multi-cloud and hybrid architectures.
• Ability to translate complex compliance requirements into actionable workstreams for technical and non-technical stakeholders.
• Experience integrating common controls frameworks or GRC systems that scaled with organizational growth.
• Ability to write clear and useful security and privacy documentation for external and internal audiences.
• Ability to thrive in ambiguous, fast-paced environments and build processes from scratch.
• Comfort organizing time-bounded task management of delegated workstreams across a diverse organization.
• Ability to educate an organization on new compliance requirements and auditors on current security practices.
• Bachelor's degree or an equivalent combination of education, training, and experience. The field of study must be relevant to the role through coursework, training, or professional experience.

Preferred Qualifications

• Experience working in AI/ML companies and understanding the unique security considerations for model development and deployment.
• Experience working with cloud companies and understanding cloud security controls and physical security requirements.
• Experience at high-growth technology companies managing rapid compliance expansion.
• Experience implementing automated enforcement of security controls, such as compliance as code.
• Relevant certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor/Implementer.

Benefits

• Annual salary of $270,000–$345,000 USD.
• Hybrid policy requiring staff to work from an Anthropic office at least 25% of the time; some roles may require more office time.
• Visa sponsorship is available, although sponsorship cannot be successfully provided for every role and candidate. Anthropic retains an immigration lawyer to assist with visa applications.
• Competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office collaboration spaces.