GRC Controls Automation Engineer

Box•Austin, TX

3d•$111,500 - $145,000•Hybrid

About The Position

Box is seeking an experienced GRC Controls Automation Engineer to bridge regulatory compliance requirements, technical infrastructure, and engineering workflows. The role focuses on modernizing, designing, building, and scaling frameworks that embed compliance into the software development lifecycle (SDLC), while developing an efficient, scalable controls automation program. The engineer will provide technical leadership and work with stakeholders across the company to improve processes, communicate compliance needs, and guide technical teams. The position is based in an assigned Box office, with employees expected to work onsite at least three days per week.

Requirements

At least 5 years of professional experience working in a SaaS company in GRC, Information Security, or a similar function.
Familiarity with GCP cloud computing, AI architectures, data governance, and model validations.
Deep understanding of global frameworks such as NIST 800-53, PCI, ISO 27x, and SOC 2.
Bachelor of Science degree in Business, Management Information Systems, or a related field, or equivalent work experience.
Excellent written, verbal communication, and presentation skills, and willingness to work across different areas as needed.
Strong organizational skills and ability to succeed in a fast-paced environment.
Ability to work with urgency and follow through, with strong integrity.
Growth mindset and ability to leverage AI to support faster, smarter decisions.

Nice To Haves

CISSP, CCSK, CISM, or other related certifications.

Responsibilities

Improve existing processes, standardize processes, and develop innovative, efficient solutions.
Design, develop, and implement controls focused on compliance and automation.
Provide compliance guidance on new product features, deviations, and infrastructure changes.
Participate in strategic planning and execution for cloud and application security.
Assess the current environment, evaluate trends, and anticipate future enhancements and requirements.
Assess the existing security and compliance posture and guide implementation of products in Box's production environment.
Work across frameworks and regulatory standards, including ISO, PCI, NIST, and AICPA SOC.
Support audits by maintaining accurate process documentation.
Communicate gaps to management and coordinate cross-functional meetings to remediate and close control gaps.
Monitor and identify compliance issues and follow up on them.
Build relationships with internal and external stakeholders.