Security Risk & Compliance, Agent Security
$255k - $345k • San Francisco, CA | New York City, NY
Posted 9h ago
Job Location
San Francisco, CA | New York City, NY
Tech Stack
Remote Work Policy
On-site
Categories
Applied AI Engineer
About the job
Anthropic is building reliable, interpretable, and steerable AI systems to be safe and beneficial for users and society. The Security Governance, Risk, and Compliance (GRC) team plays a crucial role in ensuring the company meets its security commitments by translating obligations into actionable controls and providing leadership with oversight. This role will focus on AI agent governance, developing policies and standards for agent development, deployment, and operation, and ensuring compliance with relevant frameworks.
Responsibilities
- Author security policies and standards for AI agent governance.
- Define approval criteria for agents interacting with sensitive data and requiring human oversight.
- Act as the GRC reviewer in engineering approval workflows.
- Establish data governance requirements for agents, including access controls and data handling.
- Monitor agent behavior and adapt governance requirements with cross-functional teams.
- Map agent security controls to AI governance frameworks and support certification efforts.
- Assess and document agent-related security and compliance risks, driving them to resolution.
- Own the policy for agent-related risk acceptances and exceptions.
Requirements
- 8+ years in security governance, risk, and compliance, with experience owning security policies and control standards at a technology company.
- Experience with compartmentalizing sensitive data, PII, or intellectual property, and understanding identity and access mechanisms.
- Ability to reason about non-human identities as a distinct risk and control category, and design least-privilege access and accountability controls.
- Capability to translate threat models into controls and explain trade-offs to technical and non-technical audiences.
- Experience defining risk-based review or approval criteria within engineering workflows.
- Strong written communication skills for both technical and non-technical audiences.
- Ability to thrive in ambiguous environments and propose standards.
- Experience educating and influencing outcomes as a security and risk authority.
Benefits
- Annual compensation range: $255,000 - $345,000 USD
- Visa sponsorship available