Senior Security and Compliance Analyst

BoxThe intelligent Content Cloud makes it easy to automate workflows, collaborate internally and externally, and protect your sensitive data, all on one platform.Box is the world's leading Content Cloud. We are trusted by more than 115K organizations around the world today, including nearly 70% of the Fortune 500 and leaders across deeply regulated industries (such as AstraZeneca, JLL, and Nationwide), to protect their data, fuel collaboration, and power critical workflows with secure, enterprise AI.By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It's the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.WHY BOX NEEDS YOUBox's security and compliance posture is a business enabler for customers and a competitive differentiator in the market. We seek a Senior Security & Compliance Analyst to help us create, collect, package and scale security control info and evidence for customer due-diligence questionnaires and customer audits. You will work across the business to update and develop security assurance content and improve processes to drive increased customer trust and accelerate sales.WHAT YOU'LL DOSupport customer audits of Box's policies and controls, as needed - includes opportunity to meet with customersCollaborate with SMEs to maintain accurate and easy-to-understand database of customer questions and answersDrive development of new content, process improvements, and tool adoption to increase customer satisfaction and internal productivityWork hard, learn a lot, and have fun!WHO YOU AREBS degree in Business or Management Information Systems or related field OR equivalent work experience.3+ years experience in an equivalent technology risk and compliance related roleBig 4 Consulting, ideally in the Cybersecurity and Privacy practice, or similar experience in hi tech preferredExtensive knowledge of two or more of the following compliance frameworks: SOC, ISO 27001, NIST 800-53, or PCI-DSS.Excellent written and verbal communication and presentation skillsCustomer-facing experience, Public Cloud knowledge, and certifications such as CISA or CRISC are preferred, but not requiredWillingness to wear different hats and work on areas where needed.Amazing organizational skills with a drive to learn more and to get stuff done.Strong integrity. Make Mom proud!Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 2 days per week, with a focus on Tuesdays and Thursdays. Your Recruiter will share more about how we work and company culture during the hiring process.EQUAL OPPORTUNITYWe are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and independence of people with disabilities and is committed to giving them the same opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.For details on how we protect your information when you apply, please see our Personnel Privacy Notice.#J-18808-Ljbffr

Created: 2025-03-02