AI Agent Security & Compliance Architect

VulnU; New York, Northern (NY, KY); Hybrid; USD 255,000 - 345,000; Full time

Benefits offered by this job

Equity

Visa sponsorship

22 weeks parental leave

Flexible PTO

Retirement match

Learning budget

Home-office stipend

Job summary

Anthropic’s Security Governance, Risk, and Compliance (GRC) team leads security policy for AI agents, defining controls and data handling standards while partnering with engineering to ensure auditable security practices. The role focuses on least-privilege access, data governance, and risk-based review criteria within fast-changing environments.

You will map controls to ISO 27001, EU AI Act, and other frameworks, monitor agent behavior, and drive risk resolution with cross-functional teams.

Qualifications

• 8+ years in security governance, risk, and compliance, with ownership of policies and control standards.
• Ability to articulate risk and controls to engineers and auditors.
• Experience defining risk-based review criteria within engineering workflows.

Responsibilities

• Serve as security policy partner for AI agent governance, authoring policies and standards.
• Define review criteria for agent interactions with sensitive data and human approvals.
• Define data governance requirements including least-privilege access and handling of regulated data.
• Monitor agent behavior and adapt governance with cross-functional teams.
• Map agent security controls to governance frameworks (ISO 27001, ISO 42001, EU AI Act).
• Assess and document agent-related risks and drive resolution with engineers.

Skills

Security governance

Risk assessment

Policy development

Clear written communication

Education

Bachelor’s degree

Tools

ISO 27001 / ISO 42001 knowledge

Job description

Anthropic’s Security Governance, Risk, and Compliance (GRC) team leads security policy for AI agents, defining controls and data handling standards while partnering with engineering to ensure auditable security practices. The role focuses on least-privilege access, data governance, and risk-based review criteria within fast-changing environments.

You will map controls to ISO 27001, EU AI Act, and other frameworks, monitor agent behavior, and drive risk resolution with cross-functional teams.