US Public Sector Compliance, Security GRC

About the Role

You will help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP, and agency requirements). You will own recurring cycles (continuous monitoring, POA&M, annual assessments, significant changes), build new authorizations, and keep every frontier model's authorizations current.

You will turn government requirements into specific, testable requirements that engineering teams build against, review evidence, and ensure readiness for government boundaries. Building with Claude is a normal part of the job for mapping, evidence collection, and reporting.

Key Responsibilities

• Run recurring compliance cycles for US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes, incident notifications), starting with C4G on Palantir FedStart and NIST SP 800-171 assessment.
• Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (FedRAMP High, DoD impact levels, StateRAMP, TX-RAMP).
• Support model authorizations in GovCloud and Vertex for every model launch as the GRC member of the Inference and model delivery pod.
• Translate government obligations into partner team requirements (such as vulnerability SLAs) and review evidence.
• Address public sector customer questions (boundary allowances, CUI, IRS Publication 1075, CJIS, ITAR) and questionnaires.
• Map US government requirements onto the Common Control Framework with the Controls Assurance Lead.
• Automate mapping, evidence collection, and reporting with Claude, verifying machine-drafted language.

Qualifications

Minimum Qualifications

• Experience in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC, NIST SP 800-171, or StateRAMP), including post-authorization compliance cycles.
• Working command of NIST SP 800-53 Moderate baseline and authorization mechanics (boundary definition, control implementation statements, assessment, continuous monitoring, POA&M, significant change).
• Experience writing requirements for engineering teams from a control baseline and evaluating evidence.
• Working knowledge of government cloud regions (GovCloud, Vertex) and changes required when adding models, features, or regions.
• Technical fluency to read runbooks, configurations, or pipeline definitions to evaluate control enforcement.
• Clear written communication for implementation statements and status reporting.
• Ability to influence partner teams to prioritize and close compliance work.

Preferred Qualifications

• Experience taking a service through FedRAMP High, DoD IL4/IL5, or supporting classified networks.
• Experience with FedRAMP 20x pilots or machine-readable evidence/reporting.
• Experience applying LLMs to compliance tasks such as control mapping or evidence testing.
• Active US security clearance or clearance eligibility.
• Experience with StateRAMP, TX-RAMP, IRS Publication 1075, or CJIS.
• Certifications such as CISSP, CISA, or CGRC are welcome but not required.