SOX Security Controls Lead | Continuous Monitoring & ITGC

Anthropic Limited; Washington (District of Columbia); Hybrid; USD 410,000 - 510,000; Full time

Benefits offered by this job

Equity donation matching

Generous vacation and parental leave

Flexible working hours

Office space for collaboration

Job summary

Anthropic is seeking an experienced SOX/GRC professional to lead IT general controls design and continuous monitoring. You will partner with Internal Audit and engineering to define control requirements, ensure evidence readiness, and drive remediation in a hybrid Washington, DC environment.

This role emphasizes deep SOX knowledge, programming fluency, and the ability to translate regulatory language into actionable engineering criteria, with an emphasis on continuous assurance and audit-ready

Qualifications

• Thrive at the pace of a hypergrowth company with incomplete information.
• Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company.
• Engineering fluency: read code and Terraform, follow a CI/CD pipeline end to end.

Responsibilities

• Define control requirements across core ITGC domains (access, change, ops, development).
• Set system bar for in-scope systems from day one (auditability, duties, logging).
• Review changes for SOX impact during design; maintain visibility of scope and evidence needs.
• Own continuous controls monitoring and automated evidence collection for ITGCs.
• Drive remediation of ITGC deficiencies with cross-functional partners and external auditors.
• Assess scope changes for SOX impact and coordinate with engineering and leadership.

Skills

SOX compliance

Auditing experience

Python

CI/CD

Cloud infrastructure

Cross-functional collaboration

Communication

Read Terraform code

Education

Bachelor’s degree

Tools

Terraform

CI/CD

Job description

Anthropic is seeking an experienced SOX/GRC professional to lead IT general controls design and continuous monitoring. You will partner with Internal Audit and engineering to define control requirements, ensure evidence readiness, and drive remediation in a hybrid Washington, DC environment.

This role emphasizes deep SOX knowledge, programming fluency, and the ability to translate regulatory language into actionable engineering criteria, with an emphasis on continuous assurance and audit-ready