Senior AI Agent Security & GRC Leader

Anthropic Limited; New York (NY); Hybrid; USD 255,000 - 345,000; Full time

Job summary

Anthropic's Security Governance, Risk, and Compliance (GRC) team seeks an experienced leader to own policies for AI agent governance, define review criteria for interacting with sensitive data, and write standards that guide deployment, operation, and audit readiness.

You will partner with cross‑functional security, research, and engineering colleagues to monitor agent behavior, implement least‑privilege access, map controls to ISO 27001, ISO 42001, and the EU AI Act, and drive risk assessments

Qualifications

• 8+ years in security governance, risk, and compliance with ownership of security policies.
• Experience compartmentalizing sensitive data, PII, or IP and understanding IAM protections.
• Design least-privilege access and accountability controls for systems acting on behalf of users.
• Reason from a threat model to a control and explain tradeoffs to engineers and auditors.
• Defined risk-based review criteria within engineering workflows and kept them effective.
• Clear, precise written communication for technical and non-technical audiences.
• Comfort in ambiguous environments and ability to propose standards.
• Experience educating and influencing outcomes as a security authority.

Responsibilities

• Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated
• Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks
• Serve as the GRC reviewer within existing engineering approval workflows
• Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data
• Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams
• Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable
• Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners
• Own the policy for agent-related risk acceptances and exceptions, including approval authority, duration and re-review

Skills

Security governance

Risk management

Compliance

Policy development

Audit coordination

Education

Bachelor’s degree

Job description

Anthropic's Security Governance, Risk, and Compliance (GRC) team seeks an experienced leader to own policies for AI agent governance, define review criteria for interacting with sensitive data, and write standards that guide deployment, operation, and audit readiness.

You will partner with cross‑functional security, research, and engineering colleagues to monitor agent behavior, implement least‑privilege access, map controls to ISO 27001, ISO 42001, and the EU AI Act, and drive risk assessments