Lead - Security Controls Assurance - SOX

Job summary

Responsibilities

Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view…

• Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX…
• Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide (auditability, segregation…
• Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are still cheap, and…
• Own second-line control monitoring and evidence readiness. Stand up continuous controls monitoring and automated evidence collection for ITGCs (control testing, walkthrough…
• Drive control deficiency remediation with cross functional partners. Track and root-cause ITGC deficiencies surfaced by monitoring, Internal Audit, or external audit; partner…

What they're looking for

• Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts.
• Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how…
• Have genuine engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its…
• Have programming skills in Python or at least one systems language such as Go, Rust, or C/C++.
• Have deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains.

Tech stack

• Terraform
• Python
• Go
• Rust
• C++