Box
GRC Controls Automation Engineer
$112K–$145K
Austin, TX, United States, Chicago, Illinois, United States, New York, NY, United States, Redwood City, CA, United States, San Francisco, CA, United States, United States +1 · Full-time · Posted Aug 5, 2026
- Location
- Austin, TX, United States, Chicago, Illinois, United States, New York, NY, United States, Redwood City, CA, United States, San Francisco, CA, United States, United States
Redwood City, CA, United States - Experience
- 5+ years of professional experience; no alternative stated.
- Education
- BS degree in Business or Management Information Systems or related field OR equivalent work experience
About the job
Build and scale automated GRC controls embedded in Box’s software development and infrastructure workflows, supporting compliance, security planning, and audits.
What you'll do
- Design, develop, and implement compliance controls and process automation.
- Advise on compliance for product and infrastructure changes, and support cloud and application security planning.
- Maintain audit documentation, identify control gaps, and coordinate remediation across teams.
What they ask for
- 5+ years of professional experience in a SaaS company in GRC, Information Security, or a similar function.
- Familiarity with GCP cloud computing, AI architectures, data governance, and model validations.
- Deep understanding of frameworks including NIST 800-53, PCI, ISO 27x, and SOC 2.
- BS degree in Business, Management Information Systems, or a related field, or equivalent work experience.
Nice to have
- CISSP, CCSK, CISM, or related certification.
Pay
$129,500—$145,000 USD (base salary); $117,000—$145,000 USD (base salary); $11,550—$145,000 USD (base salary); $115,500—$145,000 USD (base salary); $111,500—$145,000 USD (base salary)
Tools
GCP, NIST 800-53, PCI, ISO 27x, SOC 2
AI focus
Leverage AI to support faster, smarter decisions; familiarity with AI architectures, data governance, and model validations.
Model-written summary · the original posting is authoritative