270K–345K USD / year
Security Risk & Compliance, SOX IT
OtherHybrid — San Francisco, CA, Seattle, WA, New York City, NY, Washington, DC
Published on 2026-11-10
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Lead SOX IT control requirements, monitoring, and audit readiness as Anthropic scales toward public-company standards. Partner with Engineering, Security, IT, Finance, and GRC engineering to build controls into systems and automate evidence collection.
About the company
Anthropic builds reliable and interpretable AI systems, including the Claude family of models, for businesses and developers. The company focuses on AI safety research and practical AI assistants for enterprise and consumer use.
The team
Security Governance, Risk, and Compliance (GRC), within the technical controls assurance function; reports to the Head of Security Controls Assurance.
Stack
TerraformCI/CDCloud infrastructureDeveloper platformsERP and financial systems
What you'll do
- Define SOX IT general control requirements and acceptance criteria across access, change management, operations, and program development.
- Assess control impacts of system, infrastructure, and agent framework changes during design.
- Perform second-line monitoring and readiness testing of ITGCs and IT automated controls.
- Build automated evidence collection and continuous control monitoring with GRC engineering.
- Identify control gaps, drive remediation with system owners, and verify remediation through retesting.
- Support external audits with walkthroughs, evidence, and testing schedules.
- Assess SOX scope and control impacts of new products, systems, entities, and integrations.
- Support controls and evidence for SEC cybersecurity disclosure requirements.
What we're looking for
- Senior-level experience with SOX 404 readiness or a public-company ITGC program.
- Working knowledge of PCAOB AS 2201, COSO 2013, and external audit testing and scoping.
- Hands-on experience designing, testing, and documenting IT controls.
- Ability to read code and Terraform, follow CI/CD pipelines, and assess technical designs.
- Familiarity with developer platforms, release engineering, cloud infrastructure, or ERP and financial systems.
- Strong communication and collaboration across Finance, Engineering, Internal Audit, and external auditors.
- Ability to translate compliance requirements into engineering acceptance criteria.
- Regular use of Claude or other LLMs, with sound judgment about their role in SOX assurance.
Nice to have
- 12+ years of hands-on IT audit and SOX compliance experience.
- Experience with first-year SOX 404(a) and 404(b) assessments and a first external ITGC audit.
- Experience at a pre-IPO or newly public technology company.
- Experience with controls for home-built financial systems, usage-based billing, or revenue metering.
- Experience assessing controls for AI/ML systems or production agents.
- Experience with continuous controls monitoring, automated evidence, SOC 1 reliance, or complementary user entity controls.
Benefits
- Optional equity donation matching
- Generous vacation and parental leave
- Flexible working hours