Director, SOX Infrastructure

Anthropic · San Francisco, CA · Finance · listed October 6, 2026

The shape of it

Seniority
Director
Where
Not stated
Stated pay
$230,000 – $300,000 USD
Requirements listed
9
Length
1,721 words

In the posting’s own words

We are looking for a SOX Director - Compute and Infrastructure to join our Internal Audit team at Anthropic. In this role, you will lead financial risk assessment and internal control design over compute and infrastructure. This is Anthropic's largest cost and one of the most complex areas of our financial reporting. You'll focus on cloud spend, usage-based costs, vendor commitments, accruals, and cost allocation, as we scale rapidly toward an IPO.

What it asks for · 9

  • Have designed controls over cloud, compute, or infrastructure cost, or over a comparable high-volume, usage-based process, and understand control objectives, IPE, and sufficiency of audit evidence
  • Have proven ability to establish or scale SOX controls at newly public or pre-IPO companies
  • Possess deep understanding of compute accruals, vendor commitments, cost allocation, financial close, and US GAAP requirements
  • Have experience evaluating service organization reports (SOC 1 and SOC 2) and complementary user entity controls
  • Are comfortable working with large datasets and data pipelines, and partnering with data science and engineering teams
  • Can structure ambiguous control problems and influence across stakeholders without direct authority
  • Have strong project management, analytical, and communication skills
  • Hold a Bachelor's degree in Accounting, Finance, Business Administration, IT/Engineering
  • Are passionate about building scalable processes that support organizational growth and Anthropic's mission to create safe AI

Also a plus

  • Have 12+ years of hands-on SOX, internal audit, or internal controls experience, preferably in both Big 4 and in-house roles at a fast-paced technology company
  • CPA (or similar certification) and/ or CISA
  • Familiarity with cloud provider billing and commitment structures (AWS, GCP, Azure)
  • SQL and comfort working directly with usage, telemetry, and cost data to validate what the systems are telling you
  • Experience with controls over cost of revenue, gross margin reporting, and allocation methodologies
  • Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes
  • Understanding of lease accounting (ASC 842) and other accounting standards relevant to infrastructure and capacity arrangements
  • Experience working at a high-growth AI or technology company

What the job covers

  • Lead financial risk and internal control design for compute and infrastructure accounting, including cloud spend, usage-based costs, vendor commitments, credits, refunds, accruals, cost allocation, budgeting, and asset lifecycle management
  • Develop and execute the SOX control plan and roadmap for compute and infrastructure, making defensible prioritization calls on what must be controlled now and what can follow
  • Own scoping, risk assessment, walkthroughs, testing, remediation, and reporting activities for compute and infrastructure processes
  • Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness
  • Pioneer the use of AI and automation to enhance control effectiveness, including full-population matching of usage to invoices, continuous monitoring, and anomaly detection
  • Design, implement, and monitor controls over the completeness, accuracy, and cutoff of compute cost, including monthly accruals built from internal workload telemetry and the true-up to provider invoices
  • Establish controls over multi-year provider agreements, including reserved capacity, minimum spend commitments, usage-based charges, signing credits, service-level credits, refunds, and billing corrections
  • Design and test controls over the allocation of compute cost between cost of revenue and research and development, including workload tagging, shared clusters, and changes to tagging logic or allocation models
  • Establish the investigation threshold and variance criteria used in the control design to ensure the precision needed to detect a material misstatement
  • Design and test controls over infrastructure related control inclusive of development of an asset lifecycle management system
  • Oversee control documentation and ensure audit-ready evidence is maintained for all compute and infrastructure processes, in compliance with US GAAP and SEC reporting requirements
  • Own control requirements across high-volume financial data pipelines, partnering with Finance Analytics &BI, Finance & Strategy, and Accounting to validate completeness, accuracy, classification, general-ledger mapping, key reports, and monthly close governance

Degree language

  • Hold a Bachelor's degree in Accounting, Finance, Business Administration, IT/Engineering

Tools and skills named

Security & compliance
  • Audit7×
  • Risk management
  • SOC 2
Ways of working
  • Testing5×
  • Technical writing2×
Operations & finance
  • GAAP2×
  • Budgeting
  • Project management
Cloud & infra
  • AWS
  • Azure
  • GCP
Data
  • Data pipelines2×
Languages
  • SQL
Models & research
  • Machine learning
Product & design
  • Roadmap

Words the posting leans on

  • controls41×
  • compute23×
  • infrastructure17×
  • cost12×
  • design11×
  • internal10×
  • sox9×
  • accounting8×
  • finance8×
  • financial8×
  • provider8×
  • allocation7×
  • data7×
  • reporting7×
  • reports7×
  • management6×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

The posting, your resume, and the gaps between them. One click loads all three.

More open at Anthropic

every open role at Anthropic →

How this page was made

An automated read of a public job posting, fetched October 6, 2026 and last changed by Anthropic on October 6, 2026. Every list above is pulled from the posting’s own sentences — nothing rewritten, nothing added, no judgment about the role or the company. Counts and seniority are read off the text by rule, so they can be wrong where the posting is unusual. The original is the only thing that binds. Openings close without warning; check the source before spending an evening on it.