GRC Controls Automation Engineer
$129,500–$145,000 year
HybridAustin, Texas, United States
Job Summary
Design, develop, and implement controls with a focus on compliance and automation to modernize frameworks embedding security directly into the SDLC. Provide guidance on new product features, infrastructure changes, and deviations while assessing the current security posture. Participate in cloud and application security strategic planning, monitor compliance issues, and communicate gaps to management for remediation. Support audits by maintaining accurate process documentation and drive improvements in existing processes across multiple frameworks including ISO, PCI, NIST, and SOC 2. Work cross-functionally with internal and external stakeholders to close control gaps and explain Box's compliance posture.
Required Qualifications
- 5+ years of professional experience working in a SaaS company in GRC, Information Security or similar function
- Familiar with GCP cloud computing, AI architectures, Data governance and model validations
- Deep understanding of global frameworks, such as NIST 800-53, PCI, ISO 27x, and SOC 2
- BS degree in Business or Management Information Systems or related field OR equivalent work experience
- Excellent written, verbal communication and presentation skills
- Ability to hustle, get stuff done, and has strong integrity
- Willingness to wear different hats and work in areas where needed
- Ability to communicate vertically and horizontally across the company
- Comfortable explaining Box's compliance posture internally and externally
- Ability to work cross-functionally
- Ability to provide technical and creative guidance to technical teams
- Ability to drive continuous improvement
- Ability to communicate and educate with Box's internal customers
- Ability to work in a fast-paced environment
- Minimum of 3 days per week in-office work
Desired Qualifications
- CISSP, CCSK, CISM or other related certifications a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.