Director, IT SOX

<div class="content-intro"><h2><strong>About Anthropic</strong></h2> <p>Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</p></div><h2>About the role</h2> <p>We are looking for a Director, IT SOX to join the Internal Audit team at Anthropic. In this role, you will be a hands-on technical contributor and key executor of our IT SOX compliance program, with deep focus on our IT General Controls, IT Application Controls, and system risk assessments.</p> <p>This role reports to the Head of IT SOX and is well-suited for someone who is comfortable with ambiguity, thrives in a high-pace environment, and enjoys solving problems that don't yet have industry-standard answers. This is a high-impact opportunity to collaborate with first and second lines of defense to help establish a control environment suitable for an AI-first company! You will act as a trusted advisor to Engineering, GRC, Security and Finance teams on the technology controls adapted to a fast growing and rapidly changing organization.</p> <p>You'll bring technical depth, a bias toward automation, and the ability to partner effectively with both technical teams and external auditors as the organization experiences scaling to public-company standards.</p> <h2><strong>Key responsibilities</strong></h2> <ul> <li>Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models</li> <li>Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls</li> <li>Assess new system implementations and changes</li> <li>Identify automation and tooling opportunities to improve control efficiency and monitoring, and contribute to the development of continuous monitoring capabilities</li> <li>Assist in scoping and planning for annual SOX IT assessments</li> <li>Execute IT SOX testing across IT General Controls and IT Application Controls, including access management, change management, and computer operations</li> <li>Perform system and process risk assessments to identify control gaps and recommend remediation</li> <li>Own control documentation and ensure audit-ready evidence is current and complete</li> <li>Evaluate IT automated controls and support the shift from manual to automated control reliance</li> <li>Scale the IT SOX program as the company grows — rationalizing scope, standardizing testing approaches, and