Technical Program Manager, SOX Compliance

Anthropic•San Francisco, NY

11d•Hybrid

About The Position

Anthropic is hiring a Technical Program Manager to own the technology side of its SOX program as the company grows. The role works across engineering, security, GRC, Finance, and Internal Audit to design and operate IT controls, close gaps, and make compliance easier for engineering teams. It also uses Claude to automate evidence collection and control testing so the program can scale with less manual work. The position covers the SOX program end-to-end, including planning, control design, evidence, testing, remediation, and year-end reporting. The Technical Program Manager will lead projects such as bringing new systems into scope, translate control requirements into engineering work, and establish processes to assess SOX impact before products, systems, or major engineering changes ship. The role also maintains scope and ownership information, tracks system migrations and changes, develops control-health metrics and dashboards, reports program status and risks to technical leadership, and continually improves the program. The position is hybrid under Anthropic’s current policy: staff are expected to be in an office at least 25% of the time, though some roles may require more. A bachelor’s degree or an equivalent combination of education, training, and/or experience is the stated minimum education. The annual salary range is $290,000–$365,000 USD.

Requirements

7+ years of experience in technical program management, IT audit, or technology compliance, focused on SOX and IT general controls.
Experience running or supporting a SOX program at a public or pre-IPO company.
Experience using automation or AI tools to make compliance work faster and more reliable.
In-depth knowledge of IT general controls and IT application controls, including access management, change management, application controls, and their role in financial reporting.
Experience working closely with external auditors.
Understanding of cloud infrastructure and engineering workflows, such as code review, CI/CD, and cloud access, sufficient to work through control design with engineers.
Ability to explain technical risks and control gaps clearly to executives and other non-technical audiences.
Ability to drive outcomes across engineering, finance, and audit teams without direct reporting authority.
Bachelor’s degree or an equivalent combination of education, training, and/or experience.
A field of study relevant to the role, demonstrated through coursework, training, or professional experience.

Nice To Haves

Background in software, systems, or security engineering.
Hands-on experience building with Claude Code or other AI tools.
Experience with automated controls in revenue or order-to-cash systems, such as billing and usage metering.
Experience with financial systems such as ERP and billing platforms, and the controls around them.
Experience building or rebuilding a SOX program at a fast-growing company.
Familiarity with other security and IT frameworks, such as NIST or ISO 27001.

Responsibilities

Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting.
Work with engineering teams to design and roll out IT general controls and IT application controls.
Build Claude-based workflows, tools, and dashboards with engineering teams to automate evidence collection, control testing, and monitoring that alerts teams to compliance issues before an audit finds them.
Lead large SOX projects, including bringing new systems into scope, with clear success criteria, dependencies, and delivery dates.
Turn control requirements into concrete engineering work with clear scope, owners, deadlines, and designs that fit existing engineering practices.
Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, ensuring appropriate controls are in place from the start.
Build strong working relationships with engineering control owners, explain control requirements, and support production of evidence for auditor requests.
Investigate control failures to identify root causes and drive timely engineering fixes so they can be tested.
Maintain an up-to-date list of systems, apps, and infrastructure in SOX scope, with an owner named for each control.
Track system migrations and scope changes and ensure controls are updated as systems move.
Build metrics and dashboards for control health, open findings, and remediation progress.
Give technical leadership regular updates on program status, risks, and remediation.
Continuously improve the program by simplifying control processes, removing manual steps, and increasing the share of controls that run cleanly.