GRC Automation Engineer – Cloud & Compliance

Box; Austin (TX); Hybrid; USD 130,000 - 145,000; Full time

Job summary

Box is seeking an experienced GRC Controls Automation Engineer to advance compliance within our SaaS platform. You will design and implement automated controls, guide product features from a compliance perspective, and collaborate with security, engineering, and product teams across Box's global footprint.

This role requires deep knowledge of NIST, PCI, ISO, and SOC 2, plus hands-on experience with GCP. Ideal candidates have 5+ years in GRC/security roles within SaaS, a BS in a related field,

Qualifications

• 5+ years of professional experience in a SaaS company in GRC, Information Security or similar function.
• Familiar with GCP cloud computing, AI architectures, Data governance and model validations.
• Deep understanding of global frameworks such as NIST 800-53, PCI, ISO 27x, and SOC 2.
• BS degree in Business or MIS or equivalent work experience.
• CISSP, CCSK, CISM or other related certifications a plus.

Responsibilities

• Drive improvements in existing processes, process standardization and develop new innovative and efficient solutions.
• Design, develop, and implement controls with a focus on compliance and automation.
• Provide compliance guidance on new product features, deviations, and changes in the infrastructure.
• Participate in cloud and application security strategic planning and execution.
• Assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment.
• Work across multiple frameworks and regulatory standards (ISO, PCI, NIST, SOC 2).
• Support audits by maintaining accurate process documentation.

Skills

GRC expertise

Automation engineering

Communication

Education

BS degree in Business or MIS

Equivalent work experience

Tools

GCP

Job description

Box is seeking an experienced GRC Controls Automation Engineer to advance compliance within our SaaS platform. You will design and implement automated controls, guide product features from a compliance perspective, and collaborate with security, engineering, and product teams across Box's global footprint.

This role requires deep knowledge of NIST, PCI, ISO, and SOC 2, plus hands-on experience with GCP. Ideal candidates have 5+ years in GRC/security roles within SaaS, a BS in a related field,