About the role

As a Product Manager focused on Enterprise Privacy, you'll collaborate with Privacy Engineering, Infrastructure, Trust and Safety, Legal, Security, GTM, enterprise and platform product teams, and our cloud partners to evolve and extend the controls that enterprises, regulated industries, and governments require in order to bring their most sensitive work to Claude. You will synthesize complex and fast-changing business needs and partner closely with the teams that retain, protect, and govern customer data across Anthropic's first-party platform and Claude on AWS, GCP, and Azure. Together, you will ensure that privacy guarantees are enforced by our systems and are verifiable by our customers.

This is a high-visibility role with substantial scope. Anthropic offers layered controls over how customer data is retained and accessed, and you will build the product surface that lets customers understand, govern, and verify these controls. This includes retention and access controls, access logs and compliance reporting, customer-managed keys and custody, data residency, and self-serve user interfaces. Your stewardship of these privacy capabilities earns the customer trust that is essential to Anthropic's mission.

Key responsibilities

• Deeply understand external customers with strict data handling requirements, from a bank's CISO to a healthcare system's compliance team to a government contractor's auditor, and the internal Trust and Safety, Legal, and GTM stakeholders whose needs pull in different directions.
• Partner with Privacy Engineering to ship controls that unblock regulated customers, balance impact against engineering cost, and deliver at Anthropic speed.
• Co-develop solutions with design-partner customers and their compliance teams, so shipped changes pass real audits, not just hypothetical ones.
• Work with engineers to steer architecture and investment decisions with a long-term lens: balancing build versus buy versus rely-on-the-cloud-provider, and sequencing custody, residency, and transparency across clouds that ship on their own timelines.
• Define success metrics for privacy controls, from preventing configuration incidents by design, to the speed at which customers can independently answer questions about their own data.
• Define and iterate on the self-serve experience for compliance and security teams, expanding what an organization can check about its own posture, settings, and access history without having to wait on support tickets.
• Gather and assess competing stakeholder needs and communicate prioritization trade-offs clearly to senior leadership, balancing privacy risk, safety requirements, legal exposure, and commercial impact. When something goes wrong, own what customers hear from us and when.
• Work with engineering leads to decide how retention, access, residency, and custody controls are enforced, so that our infrastructure keeps the promises we make.

Minimum qualifications

• Experience taking a new product area from ambiguity to a durable roadmap, and shipping controls that enterprises or regulators depend on.
• A track record of driving platform capabilities that balance the needs of multiple customer segments and internal stakeholders.
• The judgment to make prioritization trade-offs between customer demand, risk, and engineering cost, and the clarity to communicate them.
• The ability to internalize how privacy, safety, legal risk, and commercial impact interact, and translate that understanding into a coherent product vision.
• Experience building highly collaborative and effective relationships with engineers and key cross-functional stakeholders. You have equal credibility providing design doc feedback to engineers, negotiating a control with a CISO without losing the relationship, and explaining a risk trade-off to leadership.

Preferred qualifications

• 8+ years of product management experience, with deep exposure to privacy, security, or compliance products.
• Built or scaled audit logging, key management, data residency, retention, or access governance products for regulated customers.
• Shipped controls across multiple cloud providers or partnered with AWS, GCP, or Azure at the platform level.
• Worked with certification, attestation, or trust center programs (SOC 2, ISO 27001, FedRAMP).
• Used Claude, Claude Code, or comparable agentic tools and formed opinions about the data controls they should offer.