Supplier Security & Assurance, Security GRC
About this role
Professionals who thrive on blending traditional risk assessment with modern agentic automation will find a natural fit within Anthropic's Supplier Security & Assurance team. Operating inside Security GRC, the group evaluates the complex vendor ecosystem that frontier AI labs depend on, spanning SaaS platforms, data labeling operations, compute infrastructure, and hardware suppliers.
In this capacity, daily work involves driving end-to-end supplier assessments, reviewing agent-drafted evaluations, determining risk levels, and partnering with vendors and internal business owners to resolve security findings. Team members also help tune Claude-powered assessment platforms, maintain continuous monitoring frameworks, and shape the overarching security requirements for the program.
What you will do
- Run supplier security assessments from end to end by reviewing agent-prefilled outputs and evaluating vendor controls.
- Operate supplier issue management and risk treatment by documenting findings and driving remediation.
- Execute continuous monitoring after approval based on data classification changes, new reports, or incident triggers.
- Improve the program by identifying coverage gaps and proposing fixes for questionnaires and tooling.
- Tune and maintain the Claude-powered assessment platform through prompt development and calibration against decisions.
- Contribute to key performance and risk indicator reporting covering cycle time, residual risk, and open issues.
What you need
- Demonstrated experience running supplier security assessments end to end at a technology company.
- Working knowledge of risk fundamentals including inherent and residual risk, control effectiveness, and compensating controls.
- Proven track record of driving risk treatment to closure through cross-functional influence.
- Experience building or tuning an LLM-backed workflow, agent, or automation in a risk or compliance context.
- Experience operating issue management workflows with clear owners, due dates, and escalation paths.
- Working technical knowledge of SaaS security configuration and standard vendor security contract terms.
- Ability to read SOC 2 reports and penetration tests to identify control exceptions and carve-outs.
Nice to have
- Experience assessing cloud infrastructure, data center, or data-pipeline vendors.
- Experience supporting SOX, SOC 2, or ISO 27001 third-party or vendor management controls.
- Experience assessing specialized vendor cohorts such as human data operations, hardware suppliers, or compute providers.
- Experience with post-approval supplier continuous monitoring, shadow IT detection, or vendor site visits.
Skills and tech stack
Questions candidates ask
What is the remote work or office policy?
Anthropic maintains a location-based hybrid policy. Staff are expected to be in one of the offices at least 25% of the time, though some roles may require more frequent in-office presence.
What is the salary range for this role?
The annual base salary range for this position is $255,000 to $270,000 USD.
Will visa sponsorship be provided?
Anthropic does sponsor visas and retains an immigration lawyer to assist with the process. If an offer is made, the company makes every reasonable effort to secure a visa for the candidate.
What kind of tech stack and tools will I work with?
This role involves tuning and maintaining a Claude-powered assessment platform. Responsibilities include prompt development, questionnaire design, and working with SaaS security configuration standards.