US Public Sector Compliance, Security GRC

Individual contributor in Anthropic's Security GRC organisation, within Compliance and Audit Programs, who works with a peer on the US public sector compliance regimes. The role keeps government authorizations current, covering FedRAMP and FedRAMP 20x for Claude Enterprise, DoD impact levels, CMMC and NIST SP 800-171, and state programs such as StateRAMP and TX-RAMP. It runs the recurring monitoring, POA&M, assessment and significant-change cycles, helps stand up new authorizations, supports GovCloud and Vertex authorizations for each model launch, turns government obligations into testable engineering requirements, fields public sector deal questions and maps everything to the Common Control Framework, using Claude for mapping and evidence.

Anthropic wants several years of US government compliance work on a cloud service, a firm grasp of the NIST SP 800-53 Moderate baseline and how authorizations work, and the technical fluency to test configurations against controls.