GRC Automation Engineer: Cloud Compliance & SDLC

Socket.dev; Austin (TX); Hybrid; USD 130,000 - 145,000; Full time

Job summary

Box seeks an experienced GRC Controls Automation Engineer to modernize, design, build and scale compliance automation within the SDLC. You will partner across functions to drive continuous improvement and educate stakeholders on Box's compliance posture.

With 5+ years in SaaS GRC/security, you will apply expertise in GCP, NIST/PCI/ISO/SOC2 and drive automation initiatives that integrate compliance directly into development workflows. Office-based in Austin with 3+ days in the office per week.

Qualifications

• 5+ years of experience in SaaS GRC or information security.
• Familiar with GCP, AI architectures, data governance and model validations.
• Knowledge of NIST 800-53, PCI, ISO 27x, and SOC 2.
• BS degree in Business or MIS or related field or equivalent work experience.
• Certifications such as CISSP, CCSK, or CISM are a plus.
• Excellent written, verbal communication and presentation skills.

Responsibilities

• Drive improvements in existing processes, process standardization and develop new innovative and efficient solutions.
• Design, develop, and implement controls with a focus on compliance and automation.
• Provide compliance guidance on new product features, deviations, and changes in the infrastructure.
• Participate in cloud and application security strategic planning and execution.
• Implement improvements by assessing the current environment, evaluate trends, and anticipating future enhancements/requirements.
• Assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment.
• Work across multiple frameworks and regulatory standards, including but not limited to ISO, PCI, NIST, AICPA SOC.
• Support audits by maintaining accurate process documentation.
• Drive improvements in existing processes and develop new innovative and efficient solutions.
• Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps.
• Monitor and identify compliance issues and follow-up.
• Build relationships with internal and external stakeholders.

Skills

GRC

Automation

GCP

NIST 800-53

PCI

ISO 27x

SOC 2

CISSP

CCSK

CISM

Communication

Fast-paced

Education

BS degree in Business or MIS or related field

Equivalent work experience

Job description

Box seeks an experienced GRC Controls Automation Engineer to modernize, design, build and scale compliance automation within the SDLC. You will partner across functions to drive continuous improvement and educate stakeholders on Box's compliance posture.

With 5+ years in SaaS GRC/security, you will apply expertise in GCP, NIST/PCI/ISO/SOC2 and drive automation initiatives that integrate compliance directly into development workflows. Office-based in Austin with 3+ days in the office per week.