US Public Sector GRC & Security Compliance Lead

VulnU; San Francisco (CA); Hybrid; USD 255,000 - 270,000; Full time

Job summary

Anthropic seeks an experienced security compliance professional to drive US government authorizations and continuous monitoring across FedRAMP High, DoD impact levels, and StateRAMP. You will translate complex regulatory requirements into actionable engineering tasks and maintain evidence for audits.

In this role, you will partner with cross-functional teams and own cycles such as POA&M, SSP updates, and risk assessments, ensuring alignment with the Common Control Framework and GovCloud

Qualifications

• Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP).
• Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back.
• Clear writing, because implementation statements and status reports are what assessors, engineers and leadership work from.

Responsibilities

• Run the recurring compliance cycles for US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes).
• Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations with requirements and evidence work.
• Translate government obligations into partner team requirements and review the evidence.

Skills

Security compliance

IT audit

US government compliance

Documentation

Communication

Education

Bachelor’s degree or equivalent

Tools

FedRAMP

DoD IL

StateRAMP

NIST SP 800-53

Job description

Anthropic seeks an experienced security compliance professional to drive US government authorizations and continuous monitoring across FedRAMP High, DoD impact levels, and StateRAMP. You will translate complex regulatory requirements into actionable engineering tasks and maintain evidence for audits.

In this role, you will partner with cross-functional teams and own cycles such as POA&M, SSP updates, and risk assessments, ensuring alignment with the Common Control Framework and GovCloud