Lead, Security Controls Assurance – SOX

About the role

Anthropic’s Security Governance, Risk, and Compliance (GRC) team is building continuous assurance for the company’s control environment. As the Lead for Security Controls Assurance, you will own the design, implementation, and monitoring of IT general controls (ITGC) that support SOX 404 compliance for all in‑scope technology systems.

Key responsibilities

• Define control requirements and acceptance criteria for logical access, change management, computer operations, and program development across SOX‑in‑scope systems.
• Set auditability, segregation of duties, immutable logging, and evidence‑retention standards for new or migrated systems before go‑live.
• Review major infrastructure and system changes for SOX impact, ensuring scope and evidence requirements are clear early in the design phase.
• Own second‑line control monitoring, standing up continuous monitoring and automated evidence collection for ITGCs.
• Partner with engineering and Internal Audit to validate that shipped solutions meet the defined control bar before external audit testing.

Required profile

• Experience in security governance, risk, and compliance (GRC) environments.
• Proven ability to work cross‑functionally with engineering and audit teams.
• Strong understanding of SOX 404 and IT general controls.

Required skills

• SOX 404 compliance knowledge.
• ITGC design and continuous monitoring.
• Control requirement definition and acceptance criteria.
• Automated evidence collection and audit readiness.