Job brief: Security Risk & Compliance, SOX IT

What JoRoute checked · Checked by JoRoute

• Listed on Anthropic's own job board. JoRoute does not take listings from job ads or recruiters.
• First seen by JoRoute 2026-11-10 (today); last confirmed on the board 2026-11-10.
• The apply link opens job-boards.greenhouse.io, the address Anthropic's board gives for this job.
• No other listing with this title and place on this board in the last 90 days.
• No layoff notices (WARN) under this name in the state files JoRoute reads.

What the listing says · Employer's own words, not checked

• Pay: $270,000 to $345,000 a year
• Job type: Not stated
• Where: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC · New York City, NY · San Francisco, CA +2
• Posted: 2026-11-10

What the job asks · Employer's own words, not checked

Level: Senior. The posting asks for 12+ years of experience.

Must have

• Within Security GRC's technical controls assurance function, you will be a hands-on senior contributor on what the IT general controls must achieve to support SOX 404 compliance.
• As financially significant systems are built, migrated, or replaced, define what the system must provide before go-live, and assess SDLC controls for new system implementations an…
• Default to getting the requirement designed into the system rather than papering over the gap with procedure.
• 12+ years of hands-on IT audit and SOX compliance experience.
• Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Conditions

• Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts.
• Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.

Main duties

• Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, operations, and program development fo…
• Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide befor…
• Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are s…
• Perform second-line monitoring and readiness testing. Test key ITGCs and IT automated controls (ITACs) ahead of Internal Audit and the external auditors, inc…
• Build continuous monitoring and evidence readiness with GRC engineering. Stand up automated evidence collection and monitoring for ITGCs, map controls to the…

Lines copied from the posting, not rewritten. "Preferred" or "nice to have" items are not listed as must-haves.

How it compares · Compared by JoRoute from listings

• Across Anthropic's 543 open listings, 56% of those with a posting date were first posted more than 60 days ago. How Anthropic hires

What nobody outside the employer knows · Not known

• Whether the role is already filled or on hold: employers often leave listings up.
• How many people applied, and who reads the applications.
• Where in the published range an offer would land.

Ask before you apply

1. Which of the listed places is this role based in?
2. What are the interview steps, and when should I expect to hear back?

Share this brief

Send it to someone whose opinion you trust. They can open it without an account, and nothing about you is in the link.

Email itText it

To keep a copy, use your browser's Print or Share button.

Next steps

Apply on the employer's page Full listingDoes my CV fit?Practise the interviewShould I apply?

Got a message about this job asking for money or documents? Check the message first.

Keep looking

• All 543 open Anthropic jobs, and how Anthropic hires.
• Saw a job somewhere else? Check if the employer still lists it.
• Search every job JoRoute reads from employers' own job boards. No account needed.