Vendor Security & Assurance Lead - GRC & Supplier Risk

EngineersOfAI; Seattle, Northern (WA, KY); On-site; USD 140,000 - 190,000; Full time

Job summary

Anthropic is seeking a skilled professional to lead end-to-end supplier security assessments and drive risk mitigation with vendors and business owners. The role covers validations, evidence review, and documenting residual risk while shaping tooling and processes for continuous improvement.

You will develop and maintain an assessment program, tailor prompts for an LLM-backed workflow, and collaborate across security, procurement, legal, and product teams to ensure secure supplier engagements

Qualifications

• Experience running supplier security assessments end to end at a technology company.
• Knowledge of risk fundamentals (inherent vs residual) and applying them with partial evidence.
• Ability to assess vendors across security domains and identify closure ownership.
• Track record of driving risk treatment to closure through cross-team influence.
• Experience building or tuning an LLM-backed workflow in risk/compliance contexts.
• Experience logging issues with owners, due dates, and escalation.
• Technical knowledge of SaaS security configuration (SSO/SCIM) and common contract terms.

Responsibilities

• Run supplier security assessments: review evidence, evaluate controls, determine residual risk, and route to domain reviewers.
• Operate supplier issue management: document findings with severity/owner/due date, drive remediation, record risk acceptances, and roll issues up to the risk register.
• Run continuous monitoring after approval: trigger reassessments, investigate SaaS configuration, data use signals, and scope changes.
• Improve the program by identifying gaps, proposing fixes, and driving roadmap items.
• Tune and maintain our Claude-powered assessment platform: prompt design, questionnaire/assessment type design, calibration and QA.
• Contribute to KPI/KRI reporting on coverage, cycle time, residual risk, and reassessments.

Skills

Security assessments

Risk management

Vendor security

LLM workflow

Tools

Claude platform

Job description

Anthropic is seeking a skilled professional to lead end-to-end supplier security assessments and drive risk mitigation with vendors and business owners. The role covers validations, evidence review, and documenting residual risk while shaping tooling and processes for continuous improvement.

You will develop and maintain an assessment program, tailor prompts for an LLM-backed workflow, and collaborate across security, procurement, legal, and product teams to ensure secure supplier engagements