US Public Sector Security GRC Lead — FedRAMP & DoD

Anthropic; San Francisco, New York (CA, NY); Hybride; USD 255 000 - 270 000; Plein temps

Résumé du poste

Anthropic is seeking an experienced US Public Sector Compliance, Security GRC professional to manage ongoing government authorizations. You will translate regulatory requirements into actionable engineering tasks, perform evidence reviews, and maintain alignment with a unified control framework across FedRAMP, DoD, and StateRAMP programs.

You will work closely with Compliance & Audit Programs to support continuous monitoring, annual assessments, and changes to authorization boundaries.

Qualifications

• Minimum years of security compliance or IT audit experience with a cloud service.
• Experience delivering government authorizations (FedRAMP, DoD IL, NIST SP 800-53) and sustaining ongoing compliance.
• Ability to translate government requirements into engineering-ready statements and evidence.

Responsabilités

• Run recurring compliance cycles for US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates).
• Own FedRAMP 20x work and help build new authorizations (FedRAMP High, DoD ILs, StateRAMP).
• Support model authorizations in GovCloud and Vertex for all model launches.
• Translate obligations into partner team requirements and review evidence for readiness.
• Map government requirements onto the Common Control Framework and maintain a single source of truth.
• Automate mapping, evidence collection and reporting; review machine-generated language before records are created.
• Write clear engineering requirements from control baselines and review submitted evidence.
• Collaborate with GovCloud/Vertex regions and identify changes when models or regions are added to a boundary.

Connaissances

FedRAMP

DoD IL

NIST SP 800-171

StateRAMP

CMMC

GovCloud

Vertex

Regulatory mapping

Formation

Bachelor’s degree or equivalent

Description du poste

Anthropic is seeking an experienced US Public Sector Compliance, Security GRC professional to manage ongoing government authorizations. You will translate regulatory requirements into actionable engineering tasks, perform evidence reviews, and maintain alignment with a unified control framework across FedRAMP, DoD, and StateRAMP programs.

You will work closely with Compliance & Audit Programs to support continuous monitoring, annual assessments, and changes to authorization boundaries.