Security Risk & Compliance, Agent Security

<div class="content-intro"><h2><strong>About Anthropic</strong></h2> <p>Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</p></div><h2><strong>About the team</strong></h2> <p>Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits.</p> <h2><strong>Responsibilities:</strong></h2> <ul> <li>Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated</li> <li>Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks</li> <li>Serve as the GRC reviewer within existing engineering approval workflows</li> <li>Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data</li> <li>Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams</li> <li>Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable</li> <li>Assess and document agent-