Audit, Security GRC
Core
Run Anthropic's unified audit program across SOC 2, HIPAA, ISO 27000, and ISO 42001 frameworks, planning audits, managing gap assessments, and driving automation for evidence collection.
Role type
Senior individual contributor audit program manager
Builds
Integrated audit program, operating model, and automated evidence collection workflows
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Program management, external security audit execution, framework gap assessment, audit process design, cloud environment technical fluency, automation development, stakeholder coordination
Preferred skills
Big 4 audit firm experience, new framework expansion (PCI DSS, ISO 27701), LLM usage for program work, GRC platform experience
Technologies
SOC 2, HIPAA, ISO 27000, ISO 42001, Claude, GRC platforms
Responsibilities
Plan and run quarterly audits across multiple frameworks, manage audit readiness and scope changes, build and maintain the audit operating model, drive automation for evidence collection, coordinate with audit firms and control owners, report program metrics to leadership
Seniority
Senior, hands-on IC
