# Security Risk & Compliance, SOX IT

**Company**: Anthropic
**Location**: San Francisco, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $270,000-$345,000 USD
**Category**: Security
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q116758847

**Apply**: https://job-boards.greenhouse.io/anthropic/jobs/5477464008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/security-risk-and-compliance-sox-it-50423bfc-ad5/

## Description

Anthropic's Security Governance, Risk, and Compliance (GRC) team is seeking a senior contributor for its Security Risk & Compliance, SOX IT role. The successful candidate will be responsible for driving the Sarbanes-Oxley (SOX) control environment over Anthropic's technology stack, ensuring compliance with public-company standards.

Key responsibilities:

- Define control requirements and acceptance criteria across ITGC domains for SOX in-scope systems

- Set the bar for in-scope systems from day one, assessing SDLC controls for new system implementations and changes

- Pressure-test changes for SOX impact during design, reviewing major infrastructure and system changes for control impact

- Perform second-line monitoring and readiness testing, testing key ITGCs and IT automated controls ahead of Internal Audit and external auditors

- Build continuous monitoring and evidence readiness with GRC engineering, standing up automated evidence collection and monitoring for ITGCs

- Run system and process risk assessments, identifying control gaps and recommending remediation

- Drive control deficiency remediation with cross-functional partners, tracking and root-causing ITGC deficiencies

- Support the external audit with Finance and Internal Audit, preparing walkthroughs and evidence requests

- Assess scope changes through a SOX lens, evaluating their impact on control design and engineering effort

Requirements:

- Senior contributor to an ITGC program through SOX 404 readiness and/or at a public company

- Hands-on IT audit or IT SOX experience designing, testing, and documenting controls across access management, change management, and operations

- Hands-on engineering fluency, possibly from an earlier engineering career

- Deep familiarity with developer platforms, release engineering, cloud infrastructure, or ERP/financial systems control domains

- Strong collaboration and communication skills across Finance, Engineering, Internal Audit, and external auditors

Nice to have:

- Combination of audit or advisory experience with in-house experience at an AI-forward tech company

- 12+ years of hands-on IT audit and SOX compliance experience

- Experience at a pre-IPO or newly public technology company

- Defined or assessed controls over home-built financially significant systems or AI/ML systems

- Stood up continuous controls monitoring or automated evidence programs

The annual compensation range for this role is $270,000-$345,000 USD.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- SOX compliance
- ITGC
- control design
- risk assessment
- GRC engineering
- continuous monitoring
- evidence collection
- audit readiness
- communication
- collaboration

### Nice to have
- audit experience
- AI/ML systems
- cloud infrastructure
- ERP/financial systems
- continuous controls monitoring
- automated evidence programs

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/anthropic/jobs/5477464008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)