Head of IT SOX

Anthropic•San Francisco, CA

12h•Hybrid

About The Position

We are looking for a Head of IT SOX to join our Internal Audit SOX team at Anthropic. In this role, you will lead the organization's IT SOX compliance program, with a primary focus on IT General Controls (ITGCs), application controls, and system/process risk assessments. You'll work cross-functionally with Engineering, Security, IT, DevOps, and Finance to ensure the organization meets SOX 404 compliance requirements in a rapidly scaling, technology-driven environment. This is a unique opportunity to build IT SOX controls at an AI-first company, leveraging cutting-edge AI technology to create innovative, automated, and scalable compliance solutions. You will help define how AI can transform traditional SOX processes—from continuous monitoring to intelligent risk assessment—while maintaining the rigor required for public company compliance. As the Head of IT SOX, you will own SOX IT planning, scoping, testing, remediation, and reporting activities. You'll work directly with technical partners to design and implement scalable controls, oversee documentation, and manage communication with external auditors. This role reports to the Head of Internal Audit and plays a critical part in strengthening internal control maturity as the company scales through pre-IPO readiness and longer term as a public company.

Requirements

Have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company
Have proven ability to establish or scale SOX IT compliance programs at newly public or pre-IPO companies
Possess deep understanding of ITGCs, application controls, and risk assessments
Have strong project management, analytical, and communication skills
Hold a Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field
Are passionate about building scalable processes that support organizational growth and Anthropic's mission to create safe AI

Nice To Haves

Experience with Workday, Salesforce, NetSuite, GitHub, or other enterprise business systems
CISA, CIA, CPA, or similar certification
Experience supporting rapid company growth and scaling compliance programs accordingly
Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes
Understanding of financial data security and compliance requirements
Experience working at a high-growth AI or technology company
Familiarity with auditing modern software development environments

Responsibilities

Lead and manage the organization's end-to-end IT SOX compliance program
Own SOX IT planning, scoping, testing, remediation, and reporting activities
Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness
Develop and maintain the SOX IT compliance roadmap aligned with organizational growth
Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection
Drive IT controls rationalization initiatives to optimize the control environment and increase reliance on IT automated controls (ITACs)
Design, implement, and monitor IT General Controls (ITGCs) across critical systems
Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance
Conduct system and process risk assessments to identify control gaps and remediation needs
Oversee control documentation and ensure audit-ready evidence is maintained
Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes
Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls
Work directly with technical partners to design controls that align with business operations
Collaborate with process owners to identify control improvements and automation opportunities
Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks
Serve as the primary point of contact for external auditors on IT SOX matters
Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs
Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee