GSOC Response & Policy Program Specialist

GSOC Response & Policy Program Specialist

San Francisco, CA

About the Role

We are seeking a GSOC Response & Policy Program Specialist to define how Anthropic's Global Security Operations Center detects, responds to, and recovers from incidents affecting our people, facilities, and operations.

You will write the GSOC plan and policy: the functions, the severity matrix, the communication templates, and the service levels. You will build global incident-specific response protocols, covering incidents that arise across different regions and countries, and turn each one into two playbooks, one that is built on actionability for the operator on the floor and one for the business facing for the partner receiving the call. You will design a simple, scalable on-call rotation and call tree so Incident Commander coverage never depends on any one person. You will take this body of work through Legal, HR, and Communications, secure signoff from senior leadership, and then train and roll it out.

You will assist in responding to incidents. This role will also coordinate the handoff to the appropriate Incident Commander as an incident escalates, and acts as the standing liaison between GSOC and Crisis Management. Your job is to turn all of this into a written, approved, and actionable standard that the GSOC and the business both run on, and to keep it current as the program matures.

This is a builder's role in a program that is scaling globally. The scope covers incidents on site, off site, and during travel, including natural disasters, across every region Anthropic operates in.

Important Note: In this position, you may be exposed to graphic and explicit content, including material of a violent or psychologically disturbing nature.

This role carries an on-call requirement and after-hours availability. The GSOC Response & Policy Specialist is expected to respond to threats as they arise, including evenings, weekends, and holidays.

Responsibilities

• Author the GSOC plan and policy, including the documented set of GSOC functions, the incident severity matrix, communication templates, and service level agreements for response timing
• Design global incident- and event-specific response protocols, and produce the corresponding GSOC operator playbooks and business-facing playbooks
• Define and obtain approval for the tooling and channels used for incident response and management, and for the distinct path used for information-only employee advisories
• Partner with Legal, Communications, HR, and Employee Relations to align on notification thresholds and obligations before an incident occurs, not during one
• Design and formalize a simple, scalable on-call rotation and call tree for GSOC incident response personnel, so Incident Commander coverage does not depend on any single person's availability
• Drive policy socialization and secure approval from senior leadership
• Build and deliver the training and rollout that puts the policy into practice
• Assist in responding to incidents. This role will also coordinate the handoff to the appropriate Incident Commander as an incident escalates, and acts as the standing liaison between GSOC and Crisis Management.
• Act as the standing liaison between GSOC and Crisis Management, and partner with Crisis Management on GSOC service design
• Run after-action reviews and tabletop exercises, and fold what they surface back into the policy
• Measure whether the standard is being met, and report on it

You May Be a Good Fit If You

• Have 8+ years of professional experience in GSOCs, security operations, emergency or crisis management, business continuity, incident command, or a closely related discipline
• Hold a bachelor's degree or higher in a relevant field
• Have authored security, safety, or emergency response policy that was formally approved and adopted by an organization
• Have served as Incident Commander, or in an equivalent command role, during live incidents
• Have working knowledge of ISO 22320:2018 (or an equivalent incident command system such as ICS/NIMS) and of severity or tiering frameworks, and can speak to adapting one to a specific organization
• Write clearly and concisely for non-specialist audiences, and can tailor the same underlying content for an operator, a business partner, and an executive
• Can manage a document-heavy program on a deadline while remaining available for live incident response
• Have a strong drive for continuous process improvement and thrive in highly collaborative environments
• Are comfortable with a flexible schedule, including 24/7 on-call rotation and after-hours response

Strong Candidates May Also Have

• Experience standing up a security operations center or an incident response program from an undocumented state
• Familiarity with mass notification, critical communications and incident management platforms
• Experience with travel risk management and duty-of-care programs covering travelers and employees affected by natural disasters
• Professional certifications such as CEM, CBCP, PSP, or FEMA ICS credentials
• Specialized knowledge of risks unique to the AI sector

Logistics

Minimum education: Bachelor's degree or an equivalent combination of education, training, and/or experience

Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.

Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.

We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any linksvisit anthropic.com/careers directly for confirmed position openings.

How We're Different

We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact advancing our long-term goals of steerable, trustworthy AI rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.

The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.

Come Work With Us!

Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.