US Public Sector Compliance, Security GRC

📋 Description

• Run the recurring compliance cycles for our US government authorizations (continuous monitoring
• Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party
• Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of
• Translate government obligations into partner team requirements, for example vulnerability SLAs in
• Answer public sector customer and deal questions (what a boundary allows, CUI, IRS Publication
• Map US government requirements onto the Common Control Framework with the Controls Assurance Lead

🎯 Requirements

• Several years in security compliance or IT audit with hands-on US government compliance for a cloud
• Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization
• Experience writing requirements for engineering teams from a control baseline and reviewing the
• Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and
• Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether
• Clear writing, because implementation statements and status reports are what assessors, engineers

🎁 Benefits

• Competitive compensation and benefits
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• Lovely office space in which to collaborate with colleagues