AI Agent Security & GRC Lead

Anthropic Limited; San Francisco (CA); Hybrid; USD 255,000 - 345,000; Full time

Job summary

Anthropic Limited is seeking a Security Governance, Risk, and Compliance lead to own policies for AI agent governance and controls. You will translate regulatory and customer obligations into actionable standards, and collaborate with security, research, and engineering teams to ensure audits and certifications stay up to date.

You will drive risk assessments, approvals for sensitive data handling, and alignment with ISO and EU AI Act frameworks in a fast‑paced, open, high‑trust environment in

Qualifications

• 8+ years in security governance, risk, and compliance with ownership of security policies and control standards.
• Experience gating data access, least-privilege concepts and data handling practices.

Responsibilities

• Serve as the security policy partner for AI agent governance and author policies and standards.
• Define review criteria for agent interactions with sensitive data and when human approval is needed.
• Act as the GRC reviewer in engineering approval workflows.
• Define data governance requirements including least-privilege access and access reviews.
• Monitor agent behavior and update governance with cross-functional teams.
• Map agent security to AI governance frameworks (ISO 27001, ISO 42001, EU AI Act).
• Assess and document agent-related security risks and drive resolution with engineers.
• Own policy for agent-related risk acceptances and exceptions, including approvals and re-review.

Skills

Security governance

Risk management

Compliance

Policy writing

Data governance

Access control

Threat modeling

Communicating with auditors

Education

Bachelor’s degree or equivalent

Tools

CISSP

CISM

CRISC

CISA

CCSP

ISO 27001 Lead Implementer/Auditor

Job description

Anthropic Limited is seeking a Security Governance, Risk, and Compliance lead to own policies for AI agent governance and controls. You will translate regulatory and customer obligations into actionable standards, and collaborate with security, research, and engineering teams to ensure audits and certifications stay up to date.

You will drive risk assessments, approvals for sensitive data handling, and alignment with ISO and EU AI Act frameworks in a fast‑paced, open, high‑trust environment in