Grc Controls Automation Engineer Jobs

Senior Manager, Japan Security and Compliance GTM WHAT IS BOX? [Recruiting owns] Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 97,000 businesses, including 70% of the Fortune 500 who trust Box to manage their content in the cloud. WHY BOX NEEDS YOU Box's security, compliance, and privacy posture is a business enabler for customers and a competitive differentiator in the market. We are looking for a Senior Manager, Japan Security and Compliance GTM, to lead Box’s customer trust efforts in Japan. This will include oversight and responsibility for gathering, vetting and scaling security, compliance, privacy and other trust-related information to customers and partners. The right person should be excellent at communicating vertically and horizontally across the company and will be comfortable explaining Box's security, compliance, and privacy posture. WHAT YOU'LL DO Lead Japan’s customer trust efforts, including responding to customer security due-diligence questionnaires and, as needed, leading customer audits. Work with US-based GRC, Security, Legal, Product and other SMEs to find answers to customer questions specific to the Japan market. Assess the need for new customer-facing content; drive the development of new content; and then scale it to account teams, customers and partners, as appropriate. Work closely with both Box Japan’s leadersh

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. You'll lead Vanta's EMEA Solutions Engineering team across the Growth and Commercial segments, developing a strong group of eight SEs while evolving our technical sales motion and helping drive growth in one of Vanta's highest-priority regions. Solutions Engineering at Vanta sits at the intersection of product, technical, and sales. The SE team works alongside Account Executives to drive technical wins, lead discovery, and make the fit between customer needs and Vanta's capabilities real, converting qualified opportunities into closed revenue. In EMEA, that means operating across a wide and diverse market: from established financial and technology hubs across Western Europe to emerging opportunities across the Middle East, Israel, and Southern Europe, each with different regulatory contexts, GRC maturity levels, and buying behaviours. The team needs to show up credibly across all of them. This manager leads the Growth and Commercial SE team, a group of eight SEs spanning a fast-moving, high-priority region. The SE motion is actively evolving from a repeatable demo approach toward a more consultative, value-based model in the right deals, while preserving speed and volume where that remains the right answer. The job is to develop the team and the motion together. What you’ll do as a Manager, Solutions Engineering at Vanta: Lead and develop the SE team: manage eight SEs across the Growth and Commercial segments, build on the existing operating rhythm, and establish a coaching cadence that elevates individual performance and team craft Drive the evolution of the SE motion: work with your team and EMEA sales leadership to shift fro

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role leads the global SOC function—monitoring, SIEM ownership, detection engineering, alert triage, and operational readiness—while also evaluating and integrating emerging AI-based SOC products and autonomous response platforms . You will oversee monitoring across multi-cloud environments (GCP primary, AWS/Azure secondary), Kubernetes, SaaS services, endpoints, developer tools, and AI workloads . You’ll collaborate closely with Cloud Security, Compliance/GRC, SRE, Platform Engineering, IT/Endpoint teams, and AI Infrastructure to ensure our detection strategy scales and stays ahead of evolving threats. This is a hands-on leadership role perfect for someone who wants to shape the SOC of the future while solving complex challenges in a high-scale AI setting. What You’ll Do SOC Leadership & 24/7 Monitoring Lead, mentor, and scale a global SOC team responsible for 24/7 monitoring, alert intake, triage, correlation, and escalation. Build operational rigor: processes, runbooks, SLAs, metrics, and quality standards for high-scale environments. Cover monitoring across: Cloud infrastructure (GCP, AWS, Azure) Kubernetes/GKE/EKS/AKS clusters SaaS platforms (Google Workspace, GitHub, Slack, Okta, etc.) Endpoints (macOS, Linux, Windows) including EDR/XDR telemetry Developer platforms + CI/CD pipelines AI/ML systems and model-serving workflows AI-Based SOC Integration & Innovation Evaluate, adopt, and integrate AI-native SOC technologies for triaging, detection, and correlation Identify opportunities to automate triage, investigations,

About the Team The Applied AI Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for a Cybersecurity Applied AI Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Dublin Office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity workf

About the Team The Applied AI Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for a Cybersecurity Applied AI Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Tokyo office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity workfl

About the Team The Applied AI Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the Role We are looking for an Applied AI Engineer, Cyber to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our Singapore office. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity workflow

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Senior Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Senior Account Executive in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK and Ireland Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect i

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Sr Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, we're profitable, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Sr AE in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect insights to inform

About the team The Applied AI Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the role We are looking for a Cybersecurity Applied AI Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our San Francisco HQ. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity wo

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function through automation and AI-native platforms to enable decision making. The systems we assess span Anthropic’s full security landscape, from authorization primitives to cryptographic foundations, so the team needs breadth across domains and the ability to go deep in any of them. Security Risk, in deep partnership with Security Engineering, will help define the security program to shape how both engineers and non-engineers build and ship software. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions and the mandate to build the AI-native platform underneath. You’ll work across a breadth of areas from identity and secrets management to infrastructure security, with your focus shaped by your strengths, ability to learn quickly, and the team’s priorities. This is largely greenfield work, and you will help define the architecture and discipline. Key responsibilities Take ownership of Anthropic’s most complex security risk problems and drive them end to end with minimal oversight, turning ambiguous signals into a defensible view of severity and likelihood and seeing them through escalation, treatment decisions, and remediation Build the systems that make risk measurable and let risk work scale, including quantification tooling, automated intake and triage, and the observability that partner teams use to understan

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Security team is growing, and we're looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role, you'll build and scale the systems, processes, and tooling that help protect Figma and our community. You'll partner closely with Security Engineering, Platform Security, IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Own Figma's security monitoring and incident response program, from detection engineering through post-incident review and continuous improvement Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity Lead incident response preparedness initiatives, including tabletop exercises, red team engagements, and response capability assessments Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs Partner wi

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. About the Team The Information Security organization at Postman operates across three pillars: Governance Risk & Compliance (GRC), Product Security, and Security Operations. We are a team of builders, not checkbox-checkers. We hold active SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA compliance postures, and we are pursuing FedRAMP High and CMMC Level 2 authorization. Our security stack includes Wiz, SentinelOne, Okta, Jamf, and 1Password, and we operate across a multi-cloud environment. The Offensive Security team is the "red" pulse of this organization. We don't just find bugs — we simulate the adversary to ensure our defenses hold up under real-world pressure. We focus on continuous security validation, AI-augmented adversary emulation, and offensive AI security research at Postman's scale. The Opportunity We are looking for a Principal Offensive Security Engineer who is as much a strategist as they are a hacker. You will own the strategic direction of Postman's offensive security program — including building out a dedicated Offensive AI Security capability from the ground up — and operat

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As Vanta's Customer Success Manager, Strategic, you will serve as a trusted advisor to Vanta's largest and most complex customers—organizations with 10,000+ employees navigating sophisticated security and compliance landscapes. Unlike traditional CSM roles managing 20-30 accounts, you'll own a focused book of 5-10 strategic accounts, driving deep customer relationships, multi-quarter projects, and high-impact business outcomes. The Strategic CS team plays a defining role in proving Vanta can serve the enterprise at scale. You'll partner closely with Strategic Account Executives and Account Managers to execute land and expand strategies, manage complex implementations, and guide executive stakeholders through their GRC program maturity journeys. Your work will directly influence Vanta's upmarket growth, product roadmap, and strategic positioning in the market. What you’ll do as a Customer Success Manager, Strategic at Vanta: Serve as the primary trusted advisor for 5-10 of Vanta's most strategic customers, each with 10,000+ employees and highly complex organizational structures Lead enterprise-scale implementations, configurations, and optimizations of Vanta's Trust Management Platform across multi-business-unit, multi-geography organizations Build and maintain deep, multi-threaded executive relationships with CISOs, CIOs, Chief Compliance Officers, and other C-level stakeholders Partner closely with Strategic Account Executives and Account Managers to identify expansion opportunities, develop account growth strategies, and execute on land and expand motions Manage complex, multi-quarter projects that require coordination across

Here’s a summary of the role: You are a seasoned AI engineer ready to design, ship, and own production‑grade agentic systems that solve real enterprise problems. At Diligent, you’ll take technical ownership of Compliance in a Box (CiaB) — a flagship AI platform reshaping how organisations manage governance, risk, and compliance at scale. You’ll architect and evolve the AI reasoning layer and agent orchestration framework at the heart of the product, shaping how multiple intelligent agents collaborate, reason, and operate safely in high‑stakes, regulated environments. This is hands‑on, deeply technical work — from system design to prompt strategy to evaluation — not research theatre. Partnering closely with product, security, and platform teams, you’ll make high‑impact decisions, move quickly, and see your work land in production fast. If you’re motivated by ownership, technical depth, and building AI systems that actually matter , this is your chance to set the standard for enterprise‑ready agentic AI. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Build and maintain the GRC Brain (AI reasoning layer) and Agentic Cortex (agent orchestration framework) — the technical core of our Compliance in a Box product Design and implement a 7-agent architecture : OnboardingAgent, ScopeAgent, StandardsMapper, RiskQuantifier, PolicyAnalyzer, InfrastructureAuditor, and ComplianceMonitor Implement Human-in-the-Loop (HITL) gates across agent workflows, and tune prompts and confidence scoring for Bedrock-hosted models Own the agent evaluation framework — measuring quality, latency, and reliability to keep CiaB performant and production-ready Collaborate with cross-functional teams to deliver CiaB feature-complete by Week 7 — your work ships fast and your impact is visible from day one These are the essentials you’ll need to get an interview: A degree in Computer Science, Software Engineering, or a related IT discipline Demonstrable understandin