Box
GRC Controls Automation Engineer
$116K–$145K
Remote +1 · Remote · Full-time · Posted Aug 5, 2026
- Location
- Remote
Redwood City, CA, United States - Experience
- 5+ years of professional experience; no alternative stated.
- Education
- BS degree in Business or Management Information Systems or related field OR equivalent work experience
About the job
Designs and scales automated GRC controls embedded in Box’s software development and infrastructure workflows, while guiding teams on compliance and supporting audits.
What you'll do
- Design, develop, and implement automated compliance controls and improve related processes.
- Advise on compliance for product and infrastructure changes, and help assess security and compliance posture.
- Support audits and coordinate cross-functional remediation of control gaps.
What they ask for
- 5+ years of professional experience in GRC, Information Security, or a similar function at a SaaS company.
- Familiarity with GCP cloud computing, AI architectures, data governance, and model validations.
- Deep understanding of global frameworks such as NIST 800-53, PCI, ISO 27x, and SOC 2.
- BS degree in Business, Management Information Systems, or a related field, or equivalent work experience.
Nice to have
- CISSP, CCSK, CISM, or other related certifications.
Pay
$115,500 — $145,000 USD (base salary)
Tools
GCP, NIST 800-53, PCI, ISO 27x, SOC 2
AI focus
Use AI to support faster, smarter work; role familiarity includes AI architectures, data governance, and model validations.
Model-written summary · the original posting is authoritative