GRC Controls Specialist: Continuous Monitoring & Frameworks

Anthropic Limited; San Francisco (CA); Hybride; USD 270 000 - 345 000; Plein temps

Avantages offerts par ce poste

Competitive compensation

Benefits packages

Equity donation matching

Generous vacation and parental leave

Flexible working hours

Résumé du poste

Anthropic's Security Audit & Controls team seeks an individual contributor to own the Common Control Framework across access, change management, logging, encryption, and people controls. You will map frameworks, define evidence, and drive continuous monitoring with control owners.

You will draft and validate control descriptions, coordinate with GRC Partners, and help automate evidence gathering, ensuring audit readiness and alignment with SOC 2, ISO, HIPAA, and FedRAMP.

Qualifications

• Several years in IT audit, security compliance, or controls assurance across multiple frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA)
• Working command of audit mechanics: scoping, walkthroughs, sampling, design vs operating effectiveness
• Experience writing control descriptions, control activities, and test procedures used by auditors

Responsabilités

• Own the Common Control Framework and its mappings to SOC 2, ISO 27001/42001, HIPAA, FedRAMP
• Draft and validate control descriptions and activities with owners, defining who does what and what evidence proves it
• Design and run continuous monitoring of control efficacy with defined metrics and automated tests
• Verify remediation and ensure evidence readiness, guiding fixes and standardizing evidence collection
• Map new frameworks onto the CCF and support gap assessments when new scopes arise
• Support integrated audits and customer audits with readiness checks and evidence readouts
• Evaluate evidence reliability, including AI-generated evidence, and set audit-ready standards
• Collaborate on automation of control mapping, evidence testing and monitoring

Connaissances

IT audit experience

Security compliance

Control descriptions

Continuous controls monitoring

Strong writing skills

Formation

Bachelor's degree in a related field

Outils

GRC tooling experience

Description du poste

Anthropic's Security Audit & Controls team seeks an individual contributor to own the Common Control Framework across access, change management, logging, encryption, and people controls. You will map frameworks, define evidence, and drive continuous monitoring with control owners.

You will draft and validate control descriptions, coordinate with GRC Partners, and help automate evidence gathering, ensuring audit readiness and alignment with SOC 2, ISO, HIPAA, and FedRAMP.