ISO 42001 Compliance Manager

Overview

Box (NYSE:BOX) is the leader in Intelligent Content Management, enabling organizations to streamline workflows, manage content, secure critical data, and transform business operations through AI. Founded in 2005, Box supports leading global enterprises like JLL, Morgan Stanley, and Nationwide.

Why Join Box?

We seek an experienced Compliance Manager with a background in auditing and information security to lead the development and execution of ISO 42001 certifications and AI governance initiatives within Box. The ideal candidate will collaborate with various departments, manage external audits, and enhance internal processes.

Responsibilities

• Drive and lead Box’s annual ISO Certification program for AIMS against ISO 42001
• Create and own the AIMS program and assess AI Governance effectiveness
• Execute external audits with third-party auditors and maintain relationships
• Work across multiple frameworks and regulatory standards, including ISO, PCI, NIST, AICPA SOC
• Drive improvements in existing processes and develop new solutions
• Communicate gaps to management and coordinate cross-functional team meetings
• Monitor and identify compliance issues and follow-up
• Build relationships with internal and external stakeholders
• Accurately and effectively communicate Box's compliance position and programs

Qualifications

• 4+ years experience leading and performing ISO 27001 audits or in an equivalent technology and compliance role
• Familiarity with GCP cloud computing, AI architectures, and data governance
• Certified in security and compliance certifications such as CISSP, CISA, CIA, CISM
• Effective communication skills with both technical and non-technical stakeholders
• Knowledge of at least two of the following compliance frameworks: ISO 27001, ISO 27017, ISO 27018, ISO 42001, PCI, SOC, NIST 800-53
• Bachelor's degree in Business or Management Information Systems or related field OR equivalent work experience
• Excellent organizational skills and a drive to succeed in a fast-paced environment
• Ability to wear different hats and work on various areas

Preferred Skills

• ISO 27001 Lead Implementer certification and ISO 42001 Lead Auditor certification
• Big 4 experience or management consulting experience