Supplier Security & Assurance Leader, GRC

Candidate; San Francisco, Northern (CA, KY); Hybrid; USD 255,000 - 270,000; Full time

Job summary

Anthropic's Supplier Security & Assurance team leads end-to-end supplier security assessments, reviewing evidence to determine inherent and residual risk and driving closure with vendors and business owners. You will maintain the Claude-powered platform, refine questionnaires, and support continued monitoring and risk reporting.

The role is based in San Francisco with a location-based hybrid policy; visa sponsorship is available and AI‑driven security programs evolve continuously.

Qualifications

• Experience running supplier security assessments end to end at a technology company.
• Knowledge of inherent and residual risk and how to apply them when evidence is incomplete.
• Ability to assess a vendor across security domains and decide when to close findings.
• Track record of driving risk treatment to closure through cross-team influence.
• Experience building or tuning an LLM-backed workflow or automation in risk/compliance.
• Experience operating issue management workflows with clear owners and due dates.
• Technical knowledge of SaaS security configuration (SSO/SCIM, auditing) and vendor contract terms.
• Ability to read SOC 2 or penetration tests and translate findings into actionable gaps.

Responsibilities

• Run supplier security assessments and evaluate controls and evidence; determine residual risk.
• Document findings with severity, owner, and due date; drive remediation with vendors and business owners.
• Reopen assessments on defined triggers; investigate configuration drift and re‑assessments.
• Identify gaps and propose fixes; carry roadmap items to mature supplier security.
• Tune and maintain Claude-powered assessment platform: prompts, design, calibration, QA.
• Contribute to KPI and RRI reporting on coverage, cycle time, residual risk, open issues, and reassessments.

Skills

Supplier security assessments

Risk fundamentals

Vendor security domain assessment

Risk treatment to closure

LLM-backed workflow development

Issue management workflows

SaaS security configuration

Reading SOC 2 / pen tests

Education

Bachelor's degree in a relevant field

Job description

Anthropic's Supplier Security & Assurance team leads end-to-end supplier security assessments, reviewing evidence to determine inherent and residual risk and driving closure with vendors and business owners. You will maintain the Claude-powered platform, refine questionnaires, and support continued monitoring and risk reporting.

The role is based in San Francisco with a location-based hybrid policy; visa sponsorship is available and AI‑driven security programs evolve continuously.