Senior Cyber Policy Lead

About the role

We're looking for a senior policy leader to own how Anthropic governs access to its most sensitive cyber-relevant model capabilities. You'll consolidate our controlled-access framework, keep our cyber-related product policy commitments current as standards shift, and serve as Anthropic's primary point of contact with government and regulatory stakeholders. This role works closely with regulators, partners, and the broader coordinated-vulnerability-disclosure community.

You don't need to write code in this role, but you should be comfortable engaging deeply with technical material — probes, classifiers, and trusted-access programs — and translating it into policy that holds up under scrutiny.

Key responsibilities

• Own Anthropic's access-requirements policy and lead consolidation of the controlled-access framework across existing and emerging access programs

• Keep Anthropic's cyber-related policy commitments current with shifting industry and regulatory standards, and ensure they map cleanly to our technical safeguards

• Serve as Anthropic's primary policy interface with government and regulatory stakeholders

• Build and maintain relationships across the coordinated vulnerability disclosure, cybersecurity policy, and national security communities

• Author and maintain reporting to partners and regulators

• Translate technical evaluation and safeguard work into policy positions and external-facing standards engagement

• Engage closely with technical teams to understand the capabilities of probes and classifiers relevant to access policy

Minimum qualifications

• Experience engaging directly with the US government and regulatory parties on matters related to cybersecurity

• Experience authoring policy positions, formal reporting, or regulatory responses for government audiences

• Extensive experience in cybersecurity policy, including coordinated vulnerability disclosure 

Preferred qualifications

• Experience coordinating sensitive pre-release or pre-publication engagement between a company and government partners (e.g., pre-deployment testing, incident notification, regulatory pre-briefs)

• Familiarity with government information-sharing and incident-notification frameworks

• Experience engaging directly with government agencies, regulators, or standards bodies on cybersecurity matters, including on AI

• Ability to read and interpret technical security material, such as capability evaluations, vulnerability reports, or threat assessments

• Established relationships across government and regulatory bodies focused on cybersecurity 

• A background spanning legal, technical, and policy disciplines related to vulnerabilities and disclosure

• Active secret security clearance or higher, or eligibility to obtain one