About the company
Anthropic's mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole.
About the team
Anthropic's Security Governance, Risk, and Compliance (GRC) team translates regulatory, customer, and voluntary obligations into controls that teams act on. Within Security GRC, Compliance and Audit Programs (CAP) runs the integrated audit across our frameworks and maintains the Common Control Framework.
About the role
You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements).
Responsibilities
- Run the recurring compliance cycles for US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications)
- Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations
- Support model authorizations in GovCloud and Vertex for every model launch
- Translate government obligations into partner team requirements
- Answer public sector customer and deal questions (CUI, IRS Publication 1075, CJIS, ITAR)
- Map US government requirements onto the Common Control Framework
- Build with Claude: automate mapping, evidence collection and reporting
Requirements
- Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP)
- Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization
- Experience writing requirements for engineering teams from a control baseline
- Working knowledge of how a GovCloud or Vertex style government region differs from commercial
- Enough technical fluency to read a runbook, configuration or pipeline definition
- Clear writing
- Ability to get partner teams to prioritize and close compliance work without authority over them
Preferred
- Have taken a service through FedRAMP High or DoD IL4 or IL5
- Have worked on a FedRAMP 20x pilot
- Have applied LLMs to compliance work
- Hold or are eligible for a US security clearance
- Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS