Head of IT SOX
San Francisco, CAFull-TimeLeadOther
About Anthropic
- Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
- We are looking for a Head of IT SOX to join our Internal Audit SOX team at Anthropic. In this role, you will lead the organization's IT SOX compliance program, with a primary focus on IT General Controls (ITGCs), application controls, and system/process risk assessments. You'll work cross-functionally with Engineering, Security, IT, DevOps, and Finance to ensure the organization meets SOX 404 compliance requirements in a rapidly scaling, technology-driven environment.
- This is a unique opportunity to build IT SOX controls at an AI-first company, leveraging cutting-edge AI technology to create innovative, automated, and scalable compliance solutions. You will help define how AI can transform traditional SOX processes—from continuous monitoring to intelligent risk assessment—while maintaining the rigor required for public company compliance.
- As the Head of IT SOX, you will own SOX IT planning, scoping, testing, remediation, and reporting activities. You'll work directly with technical partners to design and implement scalable controls, oversee documentation, and manage communication with external auditors. This role reports to the Head of Internal Audit and plays a critical part in strengthening internal control maturity as the company scales through pre-IPO readiness and longer term as a public company.
SOX IT Program Leadership
- Lead and manage the organization's end-to-end IT SOX compliance program
- Own SOX IT planning, scoping, testing, remediation, and reporting activities
- Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness
- Develop and maintain the SOX IT compliance roadmap aligned with organizational growth
- Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection
- Drive IT controls rationalization initiatives to optimize the control environment and increase reliance on IT automated controls (ITACs)
- Lead and manage the organization's end-to-end IT SOX compliance program
- Own SOX IT planning, scoping, testing, remediation, and reporting activities
- Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness
- Develop and maintain the SOX IT compliance roadmap aligned with organizational growth
- Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection
- Drive IT controls rationalization initiatives to optimize the control environment and increase reliance on IT automated controls (ITACs)
ITGC and Application Controls
- Design, implement, and monitor IT General Controls (ITGCs) across critical systems
- Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance
- Conduct system and process risk assessments to identify control gaps and remediation needs
- Oversee control documentation and ensure audit-ready evidence is maintained
- Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes
- Design, implement, and monitor IT General Controls (ITGCs) across critical systems
- Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance
- Conduct system and process risk assessments to identify control gaps and remediation needs
- Oversee control documentation and ensure audit-ready evidence is maintained
- Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes
Cross-Functional Partnership
- Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls
- Work directly with technical partners to design controls that align with business operations
- Collaborate with process owners to identify control improvements and automation opportunities
- Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks
- Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls
- Work directly with technical partners to design controls that align with business operations
- Collaborate with process owners to identify control improvements and automation opportunities
- Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks
External Audit Management
- Serve as the primary point of contact for external auditors on IT SOX matters
- Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs
- Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee
- Serve as the primary point of contact for external auditors on IT SOX matters
- Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs
- Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee
You may be a good fit if you
- Have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company
- Have proven ability to establish or scale SOX IT compliance programs at newly public or pre-IPO companies
- Possess deep understanding of ITGCs, application controls, and risk assessments
- Have strong project management, analytical, and communication skills
- Hold a Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field
- Are passionate about building scalable processes that support organizational growth and Anthropic's mission to create safe AI
- Have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company
- Have proven ability to establish or scale SOX IT compliance programs at newly public or pre-IPO companies
- Possess deep understanding of ITGCs, application controls, and risk assessments
- Have strong project management, analytical, and communication skills
- Hold a Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field
- Are passionate about building scalable processes that support organizational growth and Anthropic's mission to create safe AI
Strong candidates may also have
- Experience with Workday, Salesforce, NetSuite, GitHub, or other enterprise business systems
- CISA, CIA, CPA, or similar certification
- Experience supporting rapid company growth and scaling compliance programs accordingly
- Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes
- Understanding of financial data security and compliance requirements
- Experience working at a high-growth AI or technology company
- Familiarity with auditing modern software development environments
- Experience with Workday, Salesforce, NetSuite, GitHub, or other enterprise business systems
- CISA, CIA, CPA, or similar certification
- Experience supporting rapid company growth and scaling compliance programs accordingly
- Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes
- Understanding of financial data security and compliance requirements
- Experience working at a high-growth AI or technology company
- Familiarity with auditing modern software development environments
- The annual compensation range for this role is listed below.
- For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
How we're different
- We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
- The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
