SOX IT Controls Lead — Security GRC (Hybrid)

Candidate; San Francisco (CA); Hybrid; USD 270,000 - 345,000; Full time

Benefits offered by this job

Competitive compensation

Equity donation matching

Generous vacation and parental leave

Flexible working hours

SF office space

Job summary

Anthropic is seeking a senior GRC professional to drive SOX 404 readiness and ITGC program enhancements. You will work with Engineering, Security, IT, and Finance to define control requirements, validate evidence, and automate monitoring.

This role reports to the Head of Security Controls Assurance and supports external auditors. You will pair with cross-functional teams to design controls into systems, monitor performance, and elevate the assurance program as Anthropic scales.

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• 12+ years of hands-on IT audit and SOX compliance experience.
• Experience defining and testing ITGCs and automated controls.
• Strong collaboration with Finance, Engineering, and Internal Audit.

Responsibilities

• Define control requirements and acceptance criteria across ITGC domains for SOX in-scope systems.
• Assess SDLC controls for new systems and changes to prevent retrofitting.
• Perform second-line monitoring and readiness testing ahead of audits.
• Build automated evidence collection and monitoring with GRC engineering.
• Support external audits with walkthroughs and evidence requests.
• Assess scope changes through a SOX lens and align with regulatory requirements.

Skills

IT audit

SOX compliance

COSO 2013

PCAOB AS 2201

CI/CD

Terraform

Cloud infrastructure

communication skills

cross-functional collaboration

AI/ML controls

External auditors

Education

Bachelor's degree or equivalent

Tools

Terraform

CI/CD pipelines

Job description

Anthropic is seeking a senior GRC professional to drive SOX 404 readiness and ITGC program enhancements. You will work with Engineering, Security, IT, and Finance to define control requirements, validate evidence, and automate monitoring.

This role reports to the Head of Security Controls Assurance and supports external auditors. You will pair with cross-functional teams to design controls into systems, monitor performance, and elevate the assurance program as Anthropic scales.