AI Agent Security & GRC Lead

Anthropic; New York (NY); On-site; USD 180,000 - 235,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Fertility benefits

Parental leave (22 weeks)

Flexible PTO

Mental health support

Equity packages

Equity donation matching

Retirement plans

Life and income protection

Wellness stipend

Commuter benefits

Education stipend

Home office stipend

Relocation support

Meals in office

Job summary

Anthropic seeks an experienced leader for Security Governance, Risk, and Compliance (GRC) to drive policy for AI agent governance and to integrate security controls across engineering workflows.

You will own risk acceptance policies, work with cross-functional teams to ensure compliant agent design and operation, and strengthen Anthropic’s auditable security program in a fast-changing environment.

Qualifications

• 8+ years in security governance, risk, and compliance at a technology company.
• Defined risk-based review criteria within engineering workflows and kept them effective amid high change velocity.
• Able to explain control tradeoffs to engineers and auditors with clarity.
• Familiarity with AI governance frameworks alongside traditional security frameworks.
• Certifications such as CISSP, CISM, CRISC, CISA, CCSP, ISO 27001 or ISO 42001 Lead Implementer/Auditor.
• Understanding data handling for regulated data and least-privilege access.

Responsibilities

• Serve as the security policy partner for AI agent governance, authoring policies and standards.
• Define review criteria for agent interactions with sensitive data and when human approval is required.
• Serve as the GRC reviewer within engineering approval workflows.
• Define data governance requirements for agents, including least-privilege access and access reviews.
• Monitor agent behavior and adapt governance requirements with cross-functional teams.
• Map agent security to AI governance frameworks (ISO 27001, ISO 42001, EU AI Act).
• Assess and document agent-related security and compliance risks, driving resolution with engineering owners.
• Own policy for agent-related risk acceptances and exceptions, including approval authority and re-review.

Skills

Security governance

Risk management

Compliance

Policy authoring

Threat modeling

Communication

AI governance frameworks

Job description

Anthropic seeks an experienced leader for Security Governance, Risk, and Compliance (GRC) to drive policy for AI agent governance and to integrate security controls across engineering workflows.

You will own risk acceptance policies, work with cross-functional teams to ensure compliant agent design and operation, and strengthen Anthropic’s auditable security program in a fast-changing environment.