← All roles

Lead, Security Controls Assurance - SOX

Anthropic· Security
Apply on company site
Hybrid (San Francisco, CA), Hybrid (Seattle, WA), Hybrid (New York City, NY), Hybrid (Washington, DC)$410k - $510kfull-timePosted 1mo ago

About the role

Lead role for defining and validating IT general controls (ITGC) to support SOX 404 compliance. Partner with Internal Audit, design control requirements, and drive continuous control monitoring and evidence readiness across in-scope systems and infrastructure.

Responsibilities

  • Define control requirements and acceptance criteria across core ITGC domains for SOX in-scope systems, including home-built platforms.
  • Set the bar for in-scope systems from day one with requirements such as auditability, segregation of duties, change control, immutable logging, evidence retention.
  • Pressure-test changes for SOX impact during design and assess changes that affect SOX scope or evidence requirements.
  • Own second-line control monitoring and evidence readiness; stand up continuous controls monitoring and automated evidence collection for ITGCs.
  • Drive control deficiency remediation with cross-functional partners; assess remediation before re-testing.
  • Assess scope changes through a SOX lens for new products, entities, systems, or integrations.
  • Maintain alignment with broader compliance portfolio and ensure controls are coherent across frameworks (SOX, SOC 2, ISO 27001, etc.).

Qualifications

  • Thrive at the pace of a hypergrowth company with ability to make calls with incomplete information.
  • Led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with working knowledge of PCAOB AS 2201, COSO 2013, and external auditor practices.
  • Genuine engineering fluency: read code and Terraform, understand CI/CD pipelines, and challenge designs technically.
  • Programming skills in Python or a systems language (Go, Rust, C/C++).
  • Deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains.
  • Understand the role of the second line and balance monitoring with Internal Audit independence.
  • Strong collaboration and communication across Finance, Engineering, Internal Audit, and external auditors.
  • Comfort with using Claude and other LLMs for SOX assurance workflows; ability to discern AI capabilities today vs. future.
  • Ability to translate SOX/framework language into engineer-facing acceptance criteria and back into assurance language for auditors.

Skills

Required:ITGC control designRegulatory frameworksProgrammingCloud and infrastructureCommunication

Benefits

  • Competitive compensation and benefits
  • Optional equity donation matching
  • Generous vacation and parental leave
  • Flexible working hours
  • Office space for collaboration
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Anthropic

building reliable, interpretable, and steerable AI systems

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

ai-infrastructure-and-developmentliquid-ai-recruiting-targetsetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at Anthropic