Senior Manager, IT SOX

Details

Anthropic is seeking a hands-on Senior Manager, IT SOX to join its Internal Audit team. The role focuses on executing and scaling the IT SOX compliance program, including IT General Controls, IT Application Controls, system risk assessments, control automation, and pre-IPO readiness. The position partners with Engineering, GRC, Security, DevOps, IT, Finance, process owners, and external auditors in a rapidly changing AI-first environment.

Responsibilities

• Advise on control environments for highly automated DevOps pipelines and emerging agentic identity models.
• Partner with Engineering, Security, IT, and DevOps teams to assess scalable and sustainable controls.
• Assess new system implementations and changes.
• Identify automation and tooling opportunities and contribute to continuous monitoring capabilities.
• Assist with annual SOX IT assessment scoping and planning.
• Execute IT SOX testing across ITGCs and ITACs, including access management, change management, and computer operations.
• Perform system and process risk assessments, identify control gaps, and recommend remediation.
• Maintain audit-ready control documentation and evidence.
• Evaluate automated IT controls and support the transition from manual to automated control reliance.
• Scale the IT SOX program by rationalizing scope, standardizing testing approaches, and building repeatable processes.
• Guide internal team members and co-sourced partners, including setting priorities, reviewing workpapers, and ensuring testing quality.
• Build relationships with process and control owners and translate technical control requirements for technical and non-technical stakeholders.
• Support SEC cybersecurity disclosure requirements and related risk monitoring.
• Coordinate with external auditors on evidence requests, walkthroughs, and testing schedules.
• Track audit finding remediation and communicate status to stakeholders.

Requirements

• Hands-on IT audit or IT SOX compliance experience, ideally in a fast-paced technology environment.
• Deep knowledge of ITGCs, ITACs, and IT risk assessment methodologies.
• Experience auditing automated DevOps environments, including CI/CD pipelines, infrastructure as code, and automated deployments.
• Experience designing, testing, and documenting access management, change management, and computer operations controls.
• Ability to operate effectively in ambiguous, rapidly changing environments.
• Experience guiding internal team members or co-sourced partners.
• Ability to work independently on complex workstreams and communicate proactively with senior stakeholders.
• Strong project management, organizational, and communication skills.
• Bachelor’s degree or equivalent education, training, and experience.

Preferred Qualifications

• 8+ years of hands-on IT audit and SOX compliance experience, including Big Four or comparable experience.
• Experience with cloud environments such as GCP, AWS, and/or Azure.
• Experience at a pre-IPO or newly public technology company.
• Experience scaling audit or SOX programs during rapid growth.
• Familiarity with Workday, Salesforce, or GitHub.
• Experience evaluating SDLC controls in modern software development environments.
• CISA, CIA, CISSP, CPA, or equivalent certification.
• Interest in applying AI to audit work and evaluating controls in AI-embedded processes.

Benefits

Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and an office space for collaboration. The role follows a hybrid policy, with staff expected to work from an office at least 25% of the time. Anthropic sponsors visas where possible and makes reasonable efforts to obtain visas for candidates who receive an offer.