<div class="content-intro"><h2><strong>About Anthropic</strong></h2> <p>Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</p></div><h2>About the role</h2> <p>We are looking for a Director, IT SOX to join the Internal Audit team at Anthropic. In this role, you will be a hands-on technical contributor and key executor of our IT SOX compliance program, with deep focus on our IT General Controls, IT Application Controls, and system risk assessments.</p> <p>This role reports to the Head of IT SOX and is well-suited for someone who is comfortable with ambiguity, thrives in a high-pace environment, and enjoys solving problems that don't yet have industry-standard answers. This is a high-impact opportunity to collaborate with first and second lines of defense to help establish a control environment suitable for an AI-first company! You will act as a trusted advisor to Engineering, GRC, Security and Finance teams on the technology controls adapted to a fast growing and rapidly changing organization.</p> <p>You'll bring technical depth, a bias toward automation, and the ability to partner effectively with both technical teams and external auditors as the organization experiences scaling to public-company standards.</p> <h2><strong>Key responsibilities</strong></h2> <ul> <li>Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models</li> <li>Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls</li> <li>Assess new system implementations and changes</li> <li>Identify automation and tooling opportunities to improve control efficiency and monitoring, and contribute to the development of continuous monitoring capabilities</li> <li>Assist in scoping and planning for annual SOX IT assessments</li> <li>Execute IT SOX testing across IT General Controls and IT Application Controls, including access management, change management, and computer operations</li> <li>Perform system and process risk assessments to identify control gaps and recommend remediation</li> <li>Own control documentation and ensure audit-ready evidence is current and complete</li> <li>Evaluate IT automated controls and support the shift from manual to automated control reliance</li> <li>Scale the IT SOX program as the company grows — rationalizing scope, standardizing testing approaches, and building repeatable processes that keep pace with new systems and entities</li> <li>Guide and direct the day-to-day work of internal team members and co-sourced partners: setting priorities, reviewing workpapers, and ensuring quality and consistency across the testing program</li> <li>Build strong working relationships with process and control owners across the organization</li> <li>Translate technical control requirements for non-technical stakeholders and vice versa</li> <li>Support SEC cybersecurity disclosure requirements and related risk monitoring efforts</li> <li>Coordinate with external auditors on IT SOX matters, including evidence requests, walkthroughs, and testing schedules</li> <li>Track and assist with remediation of audit findings; communicate status to the Head of IT SOX and relevant stakeholders</li> </ul> <h2><strong>Minimum qualifications</strong></h2> <ul> <li>Hands-on IT audit or IT SOX compliance experience, ideally in a fast-paced technology environment</li> <li>Deep working knowledge of ITGCs, ITACs, and IT risk assessment methodologies</li> <li>Experience auditing highly automated DevOps environments (CI/CD pipelines, infrastructure-as-code, automated deployments) and adapting traditional change-management and access controls to them</li> <li>Experience designing, testing, and documenting controls across access management, change management, and computer operations</li> <li>Demonstrated comfort with ambiguity and the ability to operate effectively in a high-pace, rapidly changing environment</li> <li>Ability to effectively guide and direct the work of internal team members and/or co-sourced partners</li> <li>Ability to work independently on complex, ambiguous workstreams while communicating proactively with senior stakeholders</li> <li>Strong project management and organizational skills with close attention to detail</li> <li>Clear, effective communicator — able to work across technical and non-technical audiences</li> </ul> <h2><strong>Preferred qualifications</strong></h2> <ul> <li>12+ years of hands-on IT audit and SOX compliance experience, including time in a Big 4 or comparable environment</li> <li>Hands-on experience with cloud environments (GCP, AWS, and/or Azure)</li> <li>Experience scaling a compliance program to public-company standards</li> <li>Track record of scaling an audit or SOX program through periods of rapid growth</li> <li>Familiarity with enterprise systems such as Workday, Salesforce, or GitHub</li> <li>Experience evaluating SDLC controls in modern software development environments</li> <li>CISA, CIA, CISSP, CPA, or equivalent certification</li> <li>Genuine enthusiasm for wo