Audit Program Lead — GRC & Compliance (Hybrid)

Anthropic Limited; Seattle (WA); Hybrid; USD 255,000 - 270,000; Full time

Job summary

Anthropic is seeking an experienced program manager to run and optimize Anthropic's unified audit program, covering SOC 2, HIPAA, and ISO 27000 family. You will plan, coordinate with product and engineering, prepare evidence, and drive automation to streamline audits across frameworks, vendors, and regions.

You will work closely with control owners and GRC partners, manage day-to-day auditor relationships, and report status and metrics to leadership, ensuring timely remediation of findings.

Qualifications

• Several years leading multi-workstream programs with milestones and risk tracking.
• Experience overseeing external security audits (SOC 2 / ISO 27001) on the company side or at an audit firm.
• Knowledge of SOC 2, ISO 27000 family, HIPAA, and related requirements.
• Experience performing gap assessments for new frameworks or scope changes.
• Ability to build or improve an audit process including calendars, runbooks and evidence tracking.

Responsibilities

• Run an integrated audit program across SOC 2, HIPAA, ISO 27001 and related frameworks.
• Plan audit scopes, prepare control owners, gather evidence, and close findings.
• Drive automation for evidence collection and reuse across frameworks.

Skills

Program management

Audit planning

External security audits

SOC 2 / ISO 27001 / HIPAA

Gap assessments

Audit process improvement

Cross-functional coordination

Clear written communication

Job description

Anthropic is seeking an experienced program manager to run and optimize Anthropic's unified audit program, covering SOC 2, HIPAA, and ISO 27000 family. You will plan, coordinate with product and engineering, prepare evidence, and drive automation to streamline audits across frameworks, vendors, and regions.

You will work closely with control owners and GRC partners, manage day-to-day auditor relationships, and report status and metrics to leadership, ensuring timely remediation of findings.