Security GRC Controls Lead - Continuous Monitoring

Applied Methods Ltd; New York (NY); Hybrid; USD 270,000 - 345,000; Full time

Benefits offered by this job

Competitive compensation

Equity donation matching

Generous vacation & parental leave

Flexible working hours

Office in San Francisco

Job summary

Anthropic is seeking a Controls Specialist for Security GRC to own the Common Control Framework across multiple control domains. You will draft and validate control descriptions, design continuous monitoring, and drive remediation with control owners to ensure audit readiness.

This role collaborates with auditors, engineers, and leadership to maintain a single source of truth for findings. The position involves mapping new frameworks, supporting internal and external audits, and advancing a

Qualifications

• Several years in IT audit, security compliance, or controls assurance.
• Experience owning a control framework or library across multiple frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA).
• Experience writing control descriptions, control activities, and test procedures used by teams and auditors.
• Experience with continuous controls monitoring or automated evidence collection.

Responsibilities

• Own the Common Control Framework and mappings to SOC 2, ISO 27001/42001, HIPAA, FedRAMP, and customer commitments.
• Draft and validate control descriptions and control activities with owners, detailing responsibility, frequency, systems, and evidence.
• Design and run continuous monitoring of control efficacy, define metrics, and surface failures before an auditor.
• Verify remediation and carry it into steady state with partners to ensure evidence is reliable.
• Map new frameworks onto the CCF and support gap assessments for new scopes; assist audits and readiness activities.

Skills

IT audit

security compliance

controls assurance

control framework

SOC 2

ISO 27001

FedRAMP

HIPAA

Education

Bachelor's degree in related field

Job description

Anthropic is seeking a Controls Specialist for Security GRC to own the Common Control Framework across multiple control domains. You will draft and validate control descriptions, design continuous monitoring, and drive remediation with control owners to ensure audit readiness.

This role collaborates with auditors, engineers, and leadership to maintain a single source of truth for findings. The position involves mapping new frameworks, supporting internal and external audits, and advancing a