18 hours ago
Base Salary
$116k - $145k/yr
Responsibilities
- Drive process improvements, standardization, and efficient solutions for GRC and compliance operations.
- Design, develop, and implement automated controls focused on compliance.
- Provide compliance guidance for new product features, infrastructure changes, and deviations.
- Participate in cloud and application security strategic planning and execution.
- Assess security and compliance posture and guide the implementation of products in Box’s production environment.
- Work across ISO, PCI, NIST, and AICPA SOC frameworks and support audits through accurate process documentation.
- Monitor compliance issues, communicate control gaps, and coordinate cross-functional remediation.
- Build relationships and communicate compliance guidance with internal and external stakeholders.
Requirements
- 5+ years of professional experience in GRC, information security, or a similar function at a SaaS company.
- Familiarity with GCP cloud computing, AI architectures, data governance, and model validations.
- Deep understanding of frameworks including NIST 800-53, PCI, ISO 27x, and SOC 2.
- Bachelor’s degree in Business, Management Information Systems, or a related field, or equivalent work experience.
- CISSP, CCSK, CISM, or related certifications are preferred.
- Strong written, verbal communication, presentation, organizational, and cross-functional collaboration skills.
Benefits
- The role requires working from the assigned office at least 3 days per week.
- The role is eligible for equity and benefits.
Tech Stack
Categories
About Box
Box builds a cloud content management platform for enterprises, combining secure file storage and sharing with collaboration, governance, e-signature, and workflow automation. It sells subscriptions (SaaS) to organizations that need to manage the lifecycle of business content and integrate with productivity apps. Founded in 2005 and headquartered in Redwood City, CA, Box is a public company (NYSE: BOX) used by customers such as JLL, Morgan Stanley, and Nationwide.