GRC Controls Automation Engineer

Box
Redwood City
Workplace: HybridFull timeUSD 115,500 - 145,000 annuallyFunction: QA, Test & Release EngineeringExperience: 5+ yearsEducation: bachelorsSkills: ["Communication","Written and verbal communication","Organizational skills","Stakeholder management","Integrity"]

Modernize and scale automated GRC controls by embedding compliance into the software development lifecycle. Design and implement controls, provide guidance for product and infrastructure changes, and assess Box’s security/compliance posture. Work across internal teams to remediate control gaps, support audits with accurate documentation, and coordinate improvements across frameworks including ISO, PCI, NIST, AICPA SOC, and SOC 2. Collaborate with stakeholders and participate in cloud/application security planning.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Box
Box
1 day ago

GRC Controls Automation Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Modernize and scale automated GRC controls by embedding compliance into the software development lifecycle. Design and implement controls, provide guidance for product and infrastructure changes, and assess Box’s security/compliance posture. Work across internal teams to remediate control gaps, support audits with accurate documentation, and coordinate improvements across frameworks including ISO, PCI, NIST, AICPA SOC, and SOC 2. Collaborate with stakeholders and participate in cloud/application security planning.
Location: Redwood City
Workplace: Hybrid
Employment Type: Full time
Job Function: QA, Test & Release Engineering
Seniority: Mid level

Key Responsibilities

  • •Drive improvements in existing processes, standardize workflows, and develop new automated solutions.
  • •Design, develop, and implement compliance-focused controls that automate and embed compliance into SDLC.
  • •Provide compliance guidance for new product features, deviations, and infrastructure changes, including assessing production readiness.
  • •Assess security and compliance posture, communicate gaps to management, and coordinate cross-functional remediation to close control gaps.
  • •Support audits by maintaining accurate process documentation and monitor/identify compliance issues for follow-up.

Pay and Benefits

Salary: USD 115,500 - 145,000 annually
Equity and Bonus:Equity

Key Requirements

  • •5+ years of professional experience in a SaaS company working in GRC, information security, or a similar function.
  • •Familiarity with GCP cloud computing, AI architectures, data governance, and model validations.
  • •Deep understanding of global frameworks including NIST 800-53, PCI, ISO 27x, and SOC 2.
  • •BS in Business or Management Information Systems (or equivalent work experience).
  • •Relevant certifications such as CISSP, CCSK, CISM or similar are a plus.
Experience:5+ yearsSaaSGRCInformation Security
Education:Bachelor's in Business or Management Information Systems
Skills:CommunicationWritten and verbal communicationOrganizational skillsStakeholder managementIntegrity
Certifications:CISSPCCSKCISM
Tech Stack:GRCSDLCGCPISOPCINISTSOC 2AICPA SOCNIST 800-53Cloud computingData governanceModel validation

Company Brief

Box
Provides cloud content management, file sharing, and collaboration services for businesses, enabling secure content storage, workflow automation, and integrations with enterprise apps to manage and share files across organizations.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Redwood City, United States
Founded: 2005
WebsiteLinkedIn