Senior Audit & GRC Lead — Security & Compliance

Anthropic Limited; New York (NY); Hybrid; USD 255,000 - 270,000; Full time

Job summary

Anthropic is seeking an experienced Audit & Assurance professional to run its unified audit program across SOC 2, HIPAA and ISO 27000 family. You will coordinate with audit firms, drive the gap assessments, and build scalable runbooks.

The role emphasizes collaboration with control owners, automation, and reporting to GRC leadership, with a rolling application process and a hybrid office setup.

Qualifications

• Several years of program management experience with multi-workstream programs.
• Extensive experience leading external security audits (SOC 2 and ISO 27001).
• Knowledge of SOC 2, ISO 27000 family, ISO 42001 and HIPAA.
• Ability to drive audits and improve processes with calm under deadlines.

Responsibilities

• Run the audit program as a program: one integrated plan and calendar across audits and expansions, with milestones, dependencies, risks and decisions tracked, and regular status to GRC leadership and stakeholders.
• Plan and run the quarterly audits, from scoping through report and findings closeout.
• Run audit readiness ahead of each fieldwork window: control owner prep, evidence pre-checks and walkthrough dry runs.
• Scope each audit's boundary with Product and Engineering: which products and deployment paths are in scope, and flag when a launch or new platform changes it.
• Help build the audit operating model and runbook for a unified audit program, and keep both current as the program grows.
• Drive automation in the program: evidence collected from source systems, request tracking and audit reporting, with evidence and walkthroughs reused across frameworks.
• Coordinate audits across frameworks and firms so audit windows line up and control owners are asked for the same evidence once, and drive new ways of automated evidence generation and collection with GRC Engineering.
• Plan new audits and audit expansions as we commit to them.
• Run framework and scope expansion evaluations and gap assessments, with a recommendation and an effort estimate leadership can act on.
• Work closely with control owners and GRC Partners: prepare control owners for audits, get evidence delivered and findings closed, and hand findings that need extended remediation to GRC Partners.
• Manage day-to-day auditor relationships, and report audit status, findings and program metrics to GRC leadership

Skills

Program management

SOC 2 audits

ISO 27001

HIPAA knowledge

Communication

Technical fluency

Autonomy under deadlines

Education

Bachelor's degree

Tools

Claude automation

GRC tooling

Audit platforms

Job description

Anthropic is seeking an experienced Audit & Assurance professional to run its unified audit program across SOC 2, HIPAA and ISO 27000 family. You will coordinate with audit firms, drive the gap assessments, and build scalable runbooks.

The role emphasizes collaboration with control owners, automation, and reporting to GRC leadership, with a rolling application process and a hybrid office setup.