# Lead, Security Controls Assurance - SOX at Anthropic

- Company: Anthropic
- What the company does: Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems. Backed by Accel, Bessemer and General Catalyst.
- Company website: https://www.anthropic.com/
- Type: Startups (AI role)
- Level: Senior
- Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC
- Work setup: On-site
- Posted: 2026-09-08
- Apply by: 2026-10-23
- Apply: https://job-boards.greenhouse.io/anthropic/jobs/5415864008
- Page: https://www.1752.vc/careers/jobs/anthropic-lead-security-controls-assurance-sox/

## About the role

Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits.

## What they're looking for

- Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts
- Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how external auditors scope, test, and evaluate technology controls and deficiencies
- Have genuine engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its technical merits
- Have programming skills in Python or at least one systems language such as Go, Rust, or C/C++
- Have deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains
- Understand the role of the second line: you can advise and challenge engineering without taking ownership of their controls, and you know where the line sits between your monitoring and Internal Audit's independent testing

Tags: Security

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/anthropic-lead-security-controls-assurance-sox/