Senior Manager, IT SOX
Remote • San Francisco, CA
Posted 11h ago
Job Location
San Francisco, CA
Tech Stack
Remote Work Policy
Fully remote
Categories
Applied AI Engineer
About the job
Anthropic is seeking a Senior Manager, IT SOX to join their Internal Audit team. This is a hands-on role focused on executing the IT SOX compliance program, with a particular emphasis on IT General Controls, IT Application Controls, and system risk assessments. The ideal candidate is comfortable with ambiguity, thrives in a fast-paced environment, and enjoys solving complex problems. This position offers a high-impact opportunity to collaborate with various teams, including Engineering, GRC, Security, and Finance, to establish a robust control environment for an AI-first company. You will act as a trusted advisor, bringing technical depth and a bias towards automation to partner effectively with both technical teams and external auditors as the company scales to public-company standards.
Responsibilities
- Advise on control environment design for an AI-first company, including controls for automated DevOps pipelines and emerging agentic identity models.
- Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls.
- Assess new system implementations and changes.
- Identify opportunities for automation and tooling to enhance control efficiency and monitoring, and contribute to continuous monitoring capabilities.
- Assist in scoping and planning annual SOX IT assessments.
- Execute IT SOX testing for IT General Controls and IT Application Controls, including access management, change management, and computer operations.
- Perform system and process risk assessments to identify control gaps and recommend remediation.
- Own control documentation and ensure audit-ready evidence is current and complete.
- Evaluate IT automated controls and support the transition from manual to automated control reliance.
- Scale the IT SOX program to keep pace with company growth, standardizing testing approaches and building repeatable processes.
- Guide and direct the work of internal team members and co-sourced partners, setting priorities and ensuring quality.
- Build strong working relationships with process and control owners across the organization.
- Translate technical control requirements for non-technical stakeholders and vice versa.
- Support SEC cybersecurity disclosure requirements and related risk monitoring.
- Coordinate with external auditors on IT SOX matters, including evidence requests and testing schedules.
- Track and assist with remediation of audit findings and communicate status to stakeholders.
Requirements
- Hands-on IT audit or IT SOX compliance experience, preferably in a fast-paced technology environment.
- Deep working knowledge of ITGCs, ITACs, and IT risk assessment methodologies.
- Experience auditing highly automated DevOps environments (CI/CD pipelines, infrastructure-as-code, automated deployments) and adapting controls.
- Experience designing, testing, and documenting controls for access management, change management, and computer operations.
- Demonstrated comfort with ambiguity and ability to operate effectively in a high-pace, rapidly changing environment.
- Ability to effectively guide and direct the work of internal team members and/or co-sourced partners.
- Ability to work independently on complex, ambiguous workstreams while communicating proactively with senior stakeholders.
- Strong project management and organizational skills with close attention to detail.
- Clear, effective communication skills, able to work across technical and non-technical audiences.