The Engineering Manager, GRC Platform leads a team that builds and scales governance, risk, and compliance systems at Anthropic. The role involves designing automated workflows, data pipelines, and integrations to unify compliance data across multiple platforms, translating policy into enforceable rules, and leveraging AI (Claude) to augment compliance processes. The manager will set strategy, manage technical staff, and drive the technical roadmap for the GRC organization across San Francisco, New York, and Seattle.
Engineering Manager, GRC Platform at Anthropic
San Francisco, CA, New York City, NY, Seattle, WA
More jobs at AnthropicRequirements
Skills
- Systems thinker with strong understanding of complex environments, data flows, integration points, and architecture design.
- Deep focus on data integration, ability to pull, normalize, join, and surface insights from disparate data sources.
- Proficiency with APIs and integration patterns, including REST APIs, webhooks, authentication flows, polling vs push architectures.
- Independent work style with minimal guidance, ownership of complex problems from design to implementation.
- Strong analytical and problem‑solving skills with attention to detail and risk‑based prioritization.
- Familiarity with cloud platforms: AWS, GCP, Azure and extracting compliance‑relevant data from their APIs and logging systems.
- Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Ansible and DevSecOps practices including CI/CD pipeline integration and policy‑as‑code implementations.
- 12+ years total experience, 3‑4+ years managing technical individual contributors or systems‑focused teams, proven track record of building or scaling small teams (2‑5 people) in security, compliance, automation, or operations functions.
- 5+ years designing, building, and scaling automated workflows, data pipelines, or system integrations.
- Full‑stack mindset with hands‑on technical leadership, building pipelines and integrations yourself while scaling the team.
Responsibilities
- Lead the team that establishes foundational GRC processes and architecture. Design and build automated workflows for risk management and compliance, creating scalable systems that enable continuous monitoring as Anthropic grows.
- Build data pipelines that aggregate risk, control, and asset information from across our technology stack. Solve hard data integration problems: mapping disparate schemas, handling inconsistent data quality, and creating unified views of compliance posture through dashboards and reporting tools.
- Inform GRC platform strategy and implementation: in partnership with other programs, plan for and build tooling that meets our compliance requirements.
- Translate written policies and compliance requirements into policy‑as‑code—working with Engineering and Security teams to express requirements as enforceable rules, automated checks, and continuous validation rather than static documents.
- Establish feedback loops between policy and implementation: surface where technical controls diverge from written requirements, identify where policies need to evolve based on infrastructure realities, and ensure that compliance requirements are expressed in terms engineers can act on.
- Design and deploy agentic AI workflows that extend team capacity, using Claude to serve as a virtual GRC analyst to automate evidence analysis, monitor control effectiveness, draft audit responses, interpret policy documents, and handle other tasks that require reasoning over unstructured information.
- Design and maintain integrations connecting GRC tooling with cloud infrastructure, identity management systems, HRIS platforms, ticketing systems, version control, and CI/CD pipelines—working with engineers to implement integrations that enable automated evidence collection and continuous compliance validation.
- Build and lead an AI‑forward GRC engineering function as we scale: hiring team members, establishing practices, and defining the technical roadmap for governance and compliance automation at Anthropic.
Technologies
REST APIsWebhooksAuthentication flowsPolling vs push architecturesAWSGCPAzureTerraformCloudFormationAnsibleDevSecOps practicesCI/CD pipelinesPolicy-as-codeClaudeCloud infrastructureIdentity management systemsHRIS platformsTicketing systemsVersion controlData pipelinesIntegration patternsAutomation workflows
See if your resume is ready for this job
See how our AI can optimize your resume and improve your chances for this role.