Lead, Security Controls Assurance - SOX

Senior individual contributor in Anthropic's Security GRC technical controls assurance function who defines what IT general controls must achieve for SOX 404 as the company prepares for public-company standards. Working with Internal Audit, the role sets control requirements and acceptance criteria for logical access, change management, computer operations and program development on in-scope systems, including home-built platforms, and makes sure auditability, segregation of duties and logging are designed in before go-live. It reviews major system and agent framework changes for SOX impact, builds continuous control monitoring and automated evidence, drives deficiency remediation, and aligns ITGCs with SOC 2 and ISO controls.

Anthropic wants experience leading or contributing to an ITGC program through SOX 404, command of PCAOB AS 2201 and COSO 2013, real engineering fluency, and Python or a systems language.