Head of IT SOX
Anthropic
San Francisco, California
Full-Time
$300,000
HybridDirector
Anthropics mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
We are looking for a Head of IT SOX to join our Internal Audit SOX team at Anthropic. In this role, you will lead the organization's IT SOX compliance program, with a primary focus on IT General Controls (ITGCs), application controls, and system/process risk assessments. You'll work cross-functionally with Engineering, Security, IT, DevOps, and Finance to ensure the organization meets SOX 404 compliance requirements in a rapidly scaling, technology-driven environment.
This is a unique opportunity to build IT SOX controls at an AI-first company, leveraging cutting-edge AI technology to create innovative, automated, and scalable compliance solutions. You will help define how AI can transform traditional SOX processesfrom continuous monitoring to intelligent risk assessmentwhile maintaining the rigor required for public company compliance.
As the Head of IT SOX, you will own SOX IT planning, scoping, testing, remediation, and reporting activities. You'll work directly with technical partners to design and implement scalable controls, oversee documentation, and manage communication with external auditors. This role reports to the Head of Internal Audit and plays a critical part in strengthening internal control maturity as the company scales through pre-IPO readiness and longer term as a public company.
Lead and manage the organization's end-to-end IT SOX compliance program
Own SOX IT planning, scoping, testing, remediation, and reporting activities
Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness
Develop and maintain the SOX IT compliance roadmap aligned with organizational growth
Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection
Drive IT controls rationalization initiatives to optimize the control environment and increase reliance on IT automated controls (ITACs)
Design, implement, and monitor IT General Controls (ITGCs) across critical systems
Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance
Conduct system and process risk assessments to identify control gaps and remediation needs
Oversee control documentation and ensure audit-ready evidence is maintained
Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes
Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls
Work directly with technical partners to design controls that align with business operations
Collaborate with process owners to identify control improvements and automation opportunities
Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks
Serve as the primary point of contact for external auditors on IT SOX matters
Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs
Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee
Have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company
Have proven ability to establish or scale SOX IT compliance programs at newly public or pre-IPO companies
Possess deep understanding of ITGCs, application controls, and risk assessments
Have strong project management, analytical, and communication skills
Hold a Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field
Are passionate about building scalable processes that support organizational growth and Anthropic's mission to create safe AI
Experience with Workday, Salesforce, NetSuite, GitHub, or other enterprise business systems
CISA, CIA, CPA, or similar certification
Experience supporting rapid company growth and scaling compliance programs accordingly
Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes
Understanding of financial data security and compliance requirements
Experience working at a high-growth AI or technology company
Familiarity with auditing modern software development environments
The annual compensation range for this role is listed below.
For sales roles, the range provided is the roles On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience.
Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any linksvisit anthropic.com/careers directly for confirmed position openings.
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact advancing our long-term goals of steerable, trustworthy AI rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process