SOX ITGC & Security Controls Lead

Anthropic; Washington (District of Columbia); Hybrid; USD 410,000 - 510,000; Full time

Benefits offered by this job

Equity donation matching

Generous vacation & parental leave

Flexible working hours

Nice office space

Job summary

Anthropic is seeking a Security GRC professional to lead ITGC control design and SOX readiness across core systems. You will own requirements, acceptance criteria, and evidence readiness, partnering with Internal Audit and Engineering to ensure robust controls before external audits.

You will drive continuous monitoring, coordinate remediation with cross-functional teams, and align SOX work with SOC 2, ISO 27001, and related frameworks to maintain a strong control environment.

Qualifications

• Experience leading ITGC programs for SOX 404 readiness.
• Engineering fluency with reading code and CI/CD pipelines.
• Proven collaboration across Finance, Engineering, Internal Audit.
• Strong programming skills in Python or systems languages (Go, Rust, C/C++).
• CISSP, CISA, CPA or equivalent certification.

Responsibilities

• Define control requirements and acceptance criteria for ITGC SOX-in-scope systems.
• Lead second-line control monitoring and evidence readiness.
• Drive remediation of ITGC deficiencies with partners.
• Assess scope changes through a SOX lens.
• Align with broader compliance portfolio across frameworks.

Skills

Python

Go/Rust/C/C++

SOX/ITGC expertise

Cloud Infrastructure familiarity

Stakeholder collaboration

Education

Bachelor’s degree or equivalent

Tools

Terraform

CI/CD tooling

Cloud platforms

Job description

Anthropic is seeking a Security GRC professional to lead ITGC control design and SOX readiness across core systems. You will own requirements, acceptance criteria, and evidence readiness, partnering with Internal Audit and Engineering to ensure robust controls before external audits.

You will drive continuous monitoring, coordinate remediation with cross-functional teams, and align SOX work with SOC 2, ISO 27001, and related frameworks to maintain a strong control environment.