GSOC Response & Policy Program Specialist

About the role

This role is centered on building and sustaining Anthropic's global security operations center capabilities. You will define how the organization detects, responds to, and recovers from incidents that affect people, facilities, and operations. A core part of the position involves writing the GSOC plan and policy, including the functions, the severity matrix, communication templates, and service levels for response. You will build global incident-specific response protocols that address events across different regions and countries, and turn each one into two distinct playbooks. One playbook will focus on actionability for the operator on the floor, while the other will be business-facing for the partner receiving the call. You will design a simple, scalable on-call rotation and call tree so that Incident Commander coverage never depends on any single person. You will take this body of work through Legal, HR, and Communications, secure signoff from senior leadership, and then train and roll the program out across the organization. This role also requires assisting in responding to incidents as they occur. You will coordinate the handoff to the appropriate Incident Commander as an incident escalates and act as the standing liaison between GSOC and Crisis Management. Your work will turn all of this into a written, approved, and actionable standard that the GSOC and the business both run on, ensuring the program remains current as it matures. This is a builder's role in a program that is scaling globally, and the scope covers incidents on site, off site, and during travel, including natural disasters, across every region Anthropic operates in. Important Note: In this position, you may be exposed to graphic and explicit content, including material of a violent or psychologically disturbing nature. This role carries an on-call requirement and after-hours availability. The GSOC Response & Policy Specialist is expected to respond to threats as they arise, including evenings, weekends, and holidays.

Key facts

What you'll do

• Author the GSOC plan and policy, including the documented set of GSOC functions, the incident severity matrix, communication templates, and service level agreements for response timing.
• Design global incident- and event-specific response protocols, and produce the corresponding GSOC operator playbooks and business-facing playbooks.
• Define and obtain approval for the tooling and channels used for incident response and management, and for the distinct path used for information-only employee advisories.
• Partner with Legal, Communications, HR, and Employee Relations to align on notification thresholds and obligations before an incident occurs, not during one.
• Design and formalize a simple, scalable on-call rotation and call tree for GSOC incident response personnel, so Incident Commander coverage does not depend on any single person's availability.
• Drive policy socialization and secure approval from senior leadership.
• Build and deliver the training and rollout that puts the policy into practice across the organization.
• You will assist in responding to incidents. This role will also coordinate the handoff to the appropriate Incident Commander as an incident escalates, and acts as the standing liaison between GSOC and Crisis Management.
• Act as the standing liaison between GSOC and Crisis Management, and partner with Crisis Management on GSOC service design.
• Run after-action reviews and tabletop exercises, and fold what they surface back into the policy to improve continuity and effectiveness.
• Measure whether the standard is being met, and report on performance against the GSOC plan and policy.
• Maintain documentation that reflects changes in the threat landscape, operational requirements, and Anthropic's growing global footprint.

Requirements

• Have 8+ years of professional experience in GSOCs, security operations, emergency or crisis management, business continuity, incident command, or a closely related discipline.
• Hold a bachelor's degree or higher in a relevant field.
• Have authored security, safety, or emergency response policy that was formally approved and adopted by an organization.
• Have served as Incident Commander, or in an equivalent command and control role, during real-world incidents.
• Have experience defining and operating security operations center functions and response playbooks.
• Have experience with incident severity classification and the use of severity matrices in a high-stakes environment.
• Have experience partnering with cross-functional stakeholders such as Legal, HR, and Communications to align on organizational policy.
• Be comfortable with graphic and explicit content, including material that may be violent or psychologically disturbing, due to the nature of GSOC information.

Practical notes

• On-call requirement and after-hours availability.
• Potential exposure to graphic and explicit content, including material that may be violent or psychologically disturbing.
• Incidents covered include those on site, off site, and during travel, including natural disasters, across every region Anthropic operates in.
• This position requires interaction with multiple internal teams such as Legal, HR, Communications, Employee Relations, and Crisis Management.
• The role involves securing signoff from senior leadership and rolling out training to ensure policy adoption.
• The GSOC Response & Policy Program Specialist will contribute to after-action reviews and tabletop exercises to continuously improve response protocols.
• Measurement and reporting on policy adherence and service levels are core components of the role.
• The position is focused on building a scalable and sustainable incident response framework that can evolve with the growth of Anthropic.
• Travel requirements and specific hours are not detailed in the source and should be confirmed with the hiring team.
• Visa sponsorship details are not provided in the source and may vary based on location and candidate eligibility.

Output the page only.