Security Risk & Compliance, SOX IT

Anthropic's Security Governance, Risk, and Compliance (GRC) team is seeking a senior contributor for its Security Risk & Compliance, SOX IT role. The successful candidate will be responsible for driving the Sarbanes-Oxley (SOX) control environment over Anthropic's technology stack, ensuring compliance with public-company standards.

Key responsibilities:

• Define control requirements and acceptance criteria across ITGC domains for SOX in-scope systems
• Set the bar for in-scope systems from day one, assessing SDLC controls for new system implementations and changes
• Pressure-test changes for SOX impact during design, reviewing major infrastructure and system changes for control impact
• Perform second-line monitoring and readiness testing, testing key ITGCs and IT automated controls ahead of Internal Audit and external auditors
• Build continuous monitoring and evidence readiness with GRC engineering, standing up automated evidence collection and monitoring for ITGCs
• Run system and process risk assessments, identifying control gaps and recommending remediation
• Drive control deficiency remediation with cross-functional partners, tracking and root-causing ITGC deficiencies
• Support the external audit with Finance and Internal Audit, preparing walkthroughs and evidence requests
• Assess scope changes through a SOX lens, evaluating their impact on control design and engineering effort

Requirements:

• Senior contributor to an ITGC program through SOX 404 readiness and/or at a public company
• Hands-on IT audit or IT SOX experience designing, testing, and documenting controls across access management, change management, and operations
• Hands-on engineering fluency, possibly from an earlier engineering career
• Deep familiarity with developer platforms, release engineering, cloud infrastructure, or ERP/financial systems control domains
• Strong collaboration and communication skills across Finance, Engineering, Internal Audit, and external auditors

Nice to have:

• Combination of audit or advisory experience with in-house experience at an AI-forward tech company
• 12+ years of hands-on IT audit and SOX compliance experience
• Experience at a pre-IPO or newly public technology company
• Defined or assessed controls over home-built financially significant systems or AI/ML systems
• Stood up continuous controls monitoring or automated evidence programs

The annual compensation range for this role is $270,000-$345,000 USD.