GSOC Response & Policy Program Specialist

About the Position

GSOC Response & Policy Program Specialist

San Francisco, CA

About Anthropic

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.

About the Role

We are seeking a GSOC Response & Policy Program Specialist to define how Anthropic's Global Security Operations Center detects, responds to, and recovers from incidents affecting our people, facilities, and operations.

You will write the GSOC plan and policy: the functions, the severity matrix, the communication templates, and the service levels. You will build global incident-specific response protocols, covering incidents that arise across different regions and countries, and turn each one into two playbooks, one that is built on actionability for the operator on the floor and one for the business facing for the partner receiving the call. You will design a simple, scalable on-call rotation and call tree so Incident Commander coverage never depends on any one person. You will take this body of work through Legal, HR, and Communications, secure signoff from senior leadership, and then train and roll it out.

You will assist in responding to incidents. This role will also coordinate the handoff to the appropriate Incident Commander as an incident escalates, and acts as the standing liaison between GSOC and Crisis Management. Your job is to turn all of this into a written, approved, and actionable standard that the GSOC and the business both run on, and to keep it current as the program matures.

This is a builder's role in a program that is scaling globally. The scope covers incidents on site, off site, and during travel, including natural disasters, across every region Anthropic operates in.

Important Note: In this position, you may be exposed to graphic and explicit content, including material of a violent or psychologically disturbing nature.

This role carries an on-call requirement and after-hours availability. The GSOC Response & Policy Specialist is expected to respond to threats as they arise, including evenings, weekends, and holidays.

Responsibilities

• Author the GSOC plan and policy, including the documented set of GSOC functions, the incident severity matrix, communication templates, and service level agreements for response timing
• Design global incident- and event-specific response protocols, and produce the corresponding GSOC operator playbooks and business-facing playbooks
• Define and obtain approval for the tooling and channels used for incident response and management, and for the distinct path used for information-only employee advisories
• Partner with Legal, Communications, HR, and Employee Relations to align on notification thresholds and obligations before an incident occurs, not during one
• Design and formalize a simple, scalable on-call rotation and call tree for GSOC incident response personnel, so Incident Commander coverage does not depend on any single person's availability
• Drive policy socialization and secure approval from senior leadership
• Build and deliver the training and rollout that puts the policy into practice
• You will assist in responding to incidents. This role will also coordinate the handoff to the appropriate Incident Commander as an incident escalates, and acts as the standing liaison between GSOC and Crisis Management.
• Act as the standing liaison between GSOC and Crisis Management, and partner with Crisis Management on GSOC service design
• Run after-action reviews and tabletop exercises, and fold what they surface back into the policy
• Measure whether the standard is being met, and report on it

Requirements

• Have 8+ years of professional experience in GSOCs, security operations, emergency or crisis management, business continuity, incident command, or a closely related discipline
• Hold a bachelor's degree or higher in a relevant field
• Have authored security, safety, or emergency response policy that was formally approved and adopted by an organization
• Have served as Incident Commander, or in an equivalent command role, during live incidents
• Have working knowledge of ISO 22320:2018 (or an equivalent incident command system such as ICS/NIMS) and of severity or tiering frameworks, and can speak to adapting one to a specific organization
• Write clearly and concisely for non-specialist audiences, and can tailor the same underlying content for an operator, a business partner, and an executive
• Can manage a document-heavy program on a deadline while remaining available for live incident response
• Have a strong drive for continuous process improvement and thrive in highly collaborative environments
• Are comfortable with a flexible schedule, including 24/7 on-call rotation and after-hours response

Nice to Have

• Experience standing up a security operations center or an incident response program from an undocumented state
• Familiarity with mass notification, critical communications and incident management platforms
• Experience with travel risk management and duty-of-care programs covering travelers and employees affected by natural disasters
• Professional certifications such as CEM, CBCP, PSP, or FEMA ICS credentials
• Specialized knowledge of risks unique to the AI sector

We Offer

• Competitive compensation: $180,000-$230,000 USD annually
• Hybrid work policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
• Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
• Generous vacation and parental leave
• Flexible working hours
• Lovely office space in San Francisco

About the Company

Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.

Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Application Process: Applications will be received on a rolling basis. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.

Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links-visit anthropic.com/careers directly for confirmed position openings.