Technical Program Manager, SOX Compliance

Anthropic•San Francisco, CA

11d•$290,000 - $365,000•Hybrid

About The Position

Anthropic is hiring a Technical Program Manager to own the technology side of its SOX program as the company grows. The role works across engineering, security, GRC, Finance, and Internal Audit to design and operate IT controls, close control gaps, and make compliance less burdensome for engineering teams. The position also uses Claude to automate evidence collection and control testing so the program can scale with less manual work. The role encompasses the SOX program lifecycle, including planning, control design, evidence collection, testing, remediation, and year-end reporting. The Technical Program Manager partners with engineering teams to implement IT general and application controls, assess systems and engineering changes for SOX impact, maintain program scope, monitor control health, and report progress and risks to technical leadership.

Requirements

7+ years of experience in technical program management, IT audit, or technology compliance, with a focus on SOX and IT general controls.
Experience running or supporting a SOX program at a public or pre-IPO company.
Experience using automation or AI tools to make compliance work faster and more reliable.
In-depth knowledge of IT general controls and IT application controls, including access management, change management, and application controls, and how they support financial reporting.
Experience working closely with external auditors.
Understanding of cloud infrastructure and engineering workflows, such as code review, CI/CD, and cloud access, sufficient to work through control design with engineers.
Ability to explain technical risks and control gaps clearly to executives and non-technical audiences.
Ability to drive outcomes across engineering, finance, and audit teams without direct reporting authority.
Bachelor’s degree or equivalent combination of education, training, and/or experience.
Education or experience in a field relevant to the role.

Nice To Haves

Background in software, systems, or security engineering.
Hands-on experience building with Claude Code or other AI tools.
Experience with automated controls in revenue or order-to-cash systems, such as billing and usage metering.
Experience with financial systems such as ERP and billing platforms, and the controls around them.
Experience building or rebuilding a SOX program at a fast-growing company.
Familiarity with other security and IT frameworks, such as NIST or ISO 27001.

Responsibilities

Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting.
Work with engineering teams to design and roll out IT general controls and IT application controls.
Build Claude-based workflows, tools, and dashboards with engineering teams to automate evidence collection, control testing, and monitoring that alerts teams to compliance issues.
Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates.
Translate control requirements into concrete engineering work with clear scope, owners, deadlines, and a design suited to existing engineering practices.
Establish processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship.
Build relationships with engineering control owners, explain control requirements, and support evidence production for auditor requests.
Investigate control failures to identify root causes and drive timely fixes that can be tested.
Maintain an up-to-date list of systems, apps, and infrastructure in SOX scope, with an owner for each control.
Track system migrations and scope changes, ensuring controls are updated as systems move.
Build metrics and dashboards for control health, open findings, and remediation progress.
Provide technical leadership with regular updates on program status, risks, and remediation.
Continuously improve the program by simplifying control processes, removing manual steps, and increasing the share of controls that run cleanly.