About this role
The Internal Audit team at Anthropic works to build reliable, interpretable, and steerable AI systems while establishing a scalable control environment for an AI-first company. This professional joins as a Senior Manager for IT SOX, serving as a hands-on technical contributor and key executor of the IT SOX compliance program. Responsibilities include focusing on IT General Controls, IT Application Controls, and system risk assessments while collaborating closely with engineering, security, and finance departments.
This high-impact position reports to the Head of IT SOX and requires navigating ambiguity in a fast-paced environment. The ideal candidate brings technical depth, a bias toward automation, and experience partnering with technical teams and external auditors. Success in this role involves designing control environments for automated DevOps pipelines and agentic identity models while scaling compliance to public-company standards.
What you will do
- Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models.
- Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls.
- Assess new system implementations and changes while identifying automation and tooling opportunities to improve control efficiency.
- Execute IT SOX testing across IT General Controls and IT Application Controls, including access management, change management, and computer operations.
- Perform system and process risk assessments to identify control gaps and recommend remediation while owning control documentation.
- Guide and direct the day-to-day work of internal team members and co-sourced partners by setting priorities and reviewing workpapers.
- Coordinate with external auditors on IT SOX matters, including evidence requests, walkthroughs, and testing schedules.
What you need
- Hands-on IT audit or IT SOX compliance experience in a fast-paced technology environment.
- Deep working knowledge of ITGCs, ITACs, and IT risk assessment methodologies.
- Experience auditing highly automated DevOps environments such as CI/CD pipelines, infrastructure-as-code, and automated deployments.
- Demonstrated comfort with ambiguity and the ability to operate effectively in a high-pace, rapidly changing environment.
- Strong project management and organizational skills with close attention to detail and clear communication abilities.
- Bachelor’s degree or an equivalent combination of education, training, and experience in a relevant field.
Nice to have
- 8+ years of hands-on IT audit and SOX compliance experience, including time in a Big 4 or comparable environment
- Hands-on experience with cloud environments including GCP, AWS, and Azure
- Experience scaling a compliance program to public-company standards
- Familiarity with enterprise systems such as Workday, Salesforce, or GitHub
- CISA, CIA, CISSP, CPA, or equivalent certification
Skills and tech stack
Questions candidates ask
What is the remote work policy for this role?
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
What is the compensation range for this position?
The annual compensation range for this role is $230,000 to $300,000 USD base salary. The years of experience required will correlate with the internal job level requirements for the position.
Does the company offer visa sponsorship?
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. If we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.