Supplier Security & Assurance (GRC) Lead

Anthropic; San Francisco (CA); On-site; USD 255,000 - 270,000; Full time

Job summary

Anthropic is seeking a Security GRC professional to lead supplier security assessments end-to-end. You will review evidence, assess controls, and drive remediation with vendors and business owners.

You will manage issues, track due dates, and update risk registers while supporting continuous monitoring after approval. You will also help mature the program by identifying gaps, refining questionnaires and tooling, and tuning LLM-based workflows.

Qualifications

• Experience running supplier security assessments end to end and driving findings to closure.
• Ability to assess vendor across security domains and determine when to escalate to specialists.
• Experience building or tuning an LLM-backed workflow, agent, or automation in risk/compliance contexts.

Responsibilities

• Run supplier security assessments: review evidence, evaluate controls, determine residual risk, route to reviewers.
• Manage supplier issues: document findings with owner and due date, drive remediation, record risk acceptances.
• Perform continuous monitoring post-approval: trigger reassessments on data classification changes or new SOC 2 reports.
• Improve the program by identifying gaps in coverage, questionnaires, and tooling.
• Maintain and tune our Claude-powered assessment platform and related prompts.

Skills

Vendor risk assessment

Supplier security assessments

LLM-driven workflows

Prompt engineering

Cross-functional collaboration

Risk management

Issue management

Data security knowledge

Contract security terms

SOC 2 familiarity

Education

Bachelor’s degree or equivalent

Tools

Claude-powered assessment platform

Job description

Anthropic is seeking a Security GRC professional to lead supplier security assessments end-to-end. You will review evidence, assess controls, and drive remediation with vendors and business owners.

You will manage issues, track due dates, and update risk registers while supporting continuous monitoring after approval. You will also help mature the program by identifying gaps, refining questionnaires and tooling, and tuning LLM-based workflows.