Supplier Security & Assurance, Security GRC

Anthropic

. Run supplier security assessments by reviewing agent-prefilled outputs, evaluating vendor controls and evidence, determining residual risk, and routing deep assessments to domain reviewers .

Posted 9/18/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $255,000 - $270,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in supplier security assessments, risk management, and compliance, with a strong focus on SaaS security configurations and vendor contract terms. Proficient in utilizing LLM-backed workflows and continuous monitoring to enhance security coverage and drive risk treatment to closure.

Highest-signal resume keywords

Supplier Security AssessmentsRisk ManagementSaaS Security ConfigurationLLM-Backed Workflow DevelopmentVendor Security Contract Terms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Supplier Security AssessmentsRisk TreatmentSaaS Security ConfigurationPrompt DevelopmentKPI ReportingControl EffectivenessSOC 2 Report AnalysisIssue Management WorkflowsResidual Risk AssessmentAutomation in Risk Compliance

Soft Skills

Cross-Team CollaborationProblem SolvingAttention to Detail

Tools & Technologies

Claude-Powered Assessment PlatformRisk RegisterContinuous Monitoring Tools

Industry Keywords

Inherent RiskResidual RiskCompensating ControlsVendor SecurityData Protection Agreement (DPA)

About the role

Key responsibilities & impact

Run supplier security assessments by reviewing agent-prefilled outputs, evaluating vendor controls and evidence, determining residual risk, and routing deep assessments to domain reviewers
Operate supplier issue management and risk treatment by documenting severity, ownership, and due dates; driving remediation; recording risk acceptances; and updating the risk register
Run continuous monitoring after approval, including reopening assessments for defined triggers and investigating SaaS configuration, data, and use-case drift
Improve supplier security coverage, questionnaires, requirements, and tooling, and carry roadmap items to mature the program
Tune and maintain Anthropic's Claude-powered assessment platform through prompt development, questionnaire and assessment-type design, calibration, and output QA
Contribute to KPI and KRI reporting on coverage, cycle time, residual risk, open issues, and reassessments
Assess the security of suppliers supporting Anthropic's frontier AI lab, including SaaS, software, human data operations, compute, data centers, hardware, and services

Requirements

What you’ll need

Experience running supplier security assessments end to end at a technology company
Working knowledge of inherent and residual risk, control effectiveness, compensating controls, and risk acceptance
Ability to assess vendors across security domains and identify when specialist review is needed
Track record of driving risk treatment to closure across teams
Experience building or tuning an LLM-backed workflow, agent, or automation in risk, compliance, or operations
Experience tuning prompts and reviewing model output for accuracy
Experience building or operating issue management workflows
Working technical knowledge of SaaS security configuration, including SSO, SCIM, admin scoping, sharing defaults, and audit log export
Knowledge of vendor security contract terms, including DPA, incident notification, subprocessors, audit, and testing rights
Ability to read SOC 2 reports or penetration tests and identify control exceptions, carve-outs, complementary user entity controls, and evidentiary limitations
Bachelor's degree or equivalent combination of education, training, and/or experience
Relevant field of study demonstrated through coursework, training, or professional experience
Visa sponsorship may be available depending on the role and candidate

Benefits

Comp & perks

Optional equity donation matching
Generous vacation leave
Generous parental leave
Flexible working hours
Office space for collaboration
Visa sponsorship where feasible
Competitive compensation