Security GRC Controls Specialist – Continuous Monitoring

Anthropic Limited; New York (NY); Ibrido; USD 270.000 - 345.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Visa sponsorship

Competitive compensation

Generous vacation

Descrizione del lavoro

Anthropic seeks a Security Audit & Controls professional to own the Common Control Framework across all control domains, including access, change management, logging, encryption, and people controls. You will map frameworks to controls, define evidence requirements, and partner with control owners and GRC to drive continuous improvement.

This role combines policy interpretation with hands-on testing of operating effectiveness, building automated monitoring, and delivering audit-ready evidence.

Competenze

• Bachelor's degree in a related field or equivalent experience.
• Experience mapping controls across SOC 2, ISO 27001, HIPAA, FedRAMP.
• Ability to translate obligations into concrete controls and evidence.
• Strong collaboration with auditors and cross-functional teams.

Mansioni

• Own the Common Control Framework and its mappings to major standards.
• Draft and validate control descriptions and activities with owners.
• Design and run continuous monitoring of control efficacy.
• Verify remediation and maintain a single source of truth for findings.
• Map new frameworks onto the CCF and support gap assessments.
• Support integrated audits and readiness for customer audits.
• Evaluate evidence reliability including AI-generated evidence.
• Build with Claude: automate mapping, testing, monitoring.

Conoscenze

Common Control Framework

Continuous monitoring

Evidence programs

LLMs in assurance

AI controls experience

GRC collaboration

Formazione

Bachelor's degree

Descrizione del lavoro

Anthropic seeks a Security Audit & Controls professional to own the Common Control Framework across all control domains, including access, change management, logging, encryption, and people controls. You will map frameworks to controls, define evidence requirements, and partner with control owners and GRC to drive continuous improvement.

This role combines policy interpretation with hands-on testing of operating effectiveness, building automated monitoring, and delivering audit-ready evidence.