GRC Automation Engineer: Cloud & AI Compliance

Box; Redwood City (CA); Hybrid; USD 130,000 - 145,000; Full time

Job summary

Box is seeking a GRC Controls Automation Engineer to modernize and automate compliance within the SDLC. You will design and implement scalable controls, guide product features for regulatory alignment, and work with security and engineering teams to improve processes.

You will partner with stakeholders across Box to assess risk, drive standardization, and support audits while leveraging GCP and AI-focused security practices in a fast-paced, AI-first environment.

Qualifications

• 5+ years of professional experience working in a SaaS company in GRC, Information Security or similar function.
• Familiar with GCP cloud computing, AI architectures, Data governance and model validations.
• Deep understanding of global frameworks, such as NIST 800-53, PCI, ISO 27x, and SOC 2.
• BS degree in Business or Management Information Systems or related field OR equivalent work experience.
• CISSP, CCSK, CISM or other related certifications a plus.
• Excellent written, verbal communication and presentation skills with a willingness to wear different hats and work in areas where needed.
• Amazing organizational skills with a drive to succeed in a fast-paced environment.
• Ability to hustle, get stuff done, and has strong integrity - make mom proud!

Responsibilities

• Drive improvements in existing processes, process standardization and develop new innovative and efficient solutions.
• Design, develop, and implement controls with a focus on compliance and automation.
• Provide compliance guidance on new product features, deviations, and changes in the infrastructure.
• Participate in cloud and application security strategic planning and execution.
• Implement improvements by assessing the current environment, evaluate trends, and anticipating future enhancements/requirements.
• Assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment.
• Work across multiple frameworks and regulatory standards, including but not limited to ISO, PCI, NIST, AICPA SOC.
• Support audits by maintaining accurate process documentation.
• Drive improvements in existing processes and develop new innovative and efficient solutions.
• Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps.
• Monitor and identify compliance issues and follow-up.
• Build relationships with internal and external stakeholders

Skills

GRC

Information Security

GCP

AI architectures

Data governance

Model validations

NIST 800-53

PCI

SOC 2

ISO 27x

Education

BS degree in Business or MIS or related field

CISSP/CCSK/CISM or related certifications a plus

Tools

GCP

Job description

Box is seeking a GRC Controls Automation Engineer to modernize and automate compliance within the SDLC. You will design and implement scalable controls, guide product features for regulatory alignment, and work with security and engineering teams to improve processes.

You will partner with stakeholders across Box to assess risk, drive standardization, and support audits while leveraging GCP and AI-focused security practices in a fast-paced, AI-first environment.