Supplier Security & Assurance, Security GRC

<div class="content-intro"><h2><strong>About Anthropic</strong></h2> <p>Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</p></div><h2><strong>About the role</strong></h2> <p>Anthropic's Supplier Security &amp; Assurance (SSA) team sits within Security GRC and is responsible for assessing the security of our suppliers: evaluating whether vendors meet our security requirements, capturing the deviations, and giving the business a clear approval decision it can act on. We assess the vendor population a frontier AI lab actually depends on: SaaS and software, human data operations, compute and data center providers, hardware suppliers, and services firms. The program is designed agent-first so that people spend their time on judgment, remediation, and the vendors that matter most.</p> <p>As a member of the Supplier Security &amp; Assurance team you will run supplier security assessments end to end: reviewing evidence, verifying agent-drafted evaluations, determining inherent and residual risk, and driving findings to closure with vendors and business owners. You will also carry the work that extends assurance past the approval, from contractual security terms and secure configuration baselines to continuous monitoring and reassessment, and you will help shape the tooling and requirements the program runs on.</p> <h2><strong>Key responsibilities</strong></h2> <ul> <li> <p>Run supplier security assessments: review agent-prefilled outputs, evaluate vendor controls and evidence, determine residual risk, route to domain reviewers where deeper assessment is warranted</p> </li> <li> <p>Operate supplier issue management and risk treatment: document each finding with a severity, an owner, and a due date, drive re