GRC Controls Automation Engineer
$115,500–$145,000 year
HybridRedwood City, California, United States
Job Summary
Design, develop, and implement controls with a focus on compliance and automation to embed regulatory standards directly into the software development lifecycle. Assess the existing security and compliance posture, evaluate trends, and anticipate future enhancements to drive improvements in existing processes and develop innovative solutions. Provide compliance guidance on new product features, deviations, and infrastructure changes while maintaining accurate process documentation to support audits. Communicate gaps to management, coordinate cross-functional meetings to remediate control gaps, and monitor identified compliance issues. Work across multiple frameworks including ISO, PCI, NIST, and AICPA SOC 2 to build a scalable program using automation within Box's SDLC.
Required Qualifications
- 5+ years of professional experience working in a SaaS company in GRC, Information Security or similar function
- Familiar with GCP cloud computing, AI architectures, Data governance and model validations
- Deep understanding of global frameworks, such as NIST 800-53, PCI, ISO 27x, and SOC 2
- BS degree in Business or Management Information Systems or related field OR equivalent work experience
- Excellent written, verbal communication and presentation skills
- Amazing organizational skills
- Ability to hustle, get stuff done, and has strong integrity
- Boxers are expected to work from their assigned office a minimum of 3 days per week
Desired Qualifications
- CISSP, CCSK, CISM or other related certifications a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.