Iso 42001 Compliance Manager

Box Box · Enterprise · Redwood City, CA · Compliance & Risk

This role is a Compliance Manager focused on ISO 42001 (Artificial Intelligence Management Systems) and AI governance within Box. The primary responsibility is to lead and manage the ISO certification program, assess AI governance effectiveness, execute external audits, and ensure compliance with various regulatory standards. While the role interacts with AI governance and AI architectures, its core function is compliance and auditing, not direct AI/ML model development or deployment.

What you'd actually do

  1. Drive and Lead Box’s annual ISO Certification program for AIMS against ISO 42001
  2. Create and own the AIMS program and assess AI Governance effectiveness while working with internal teams
  3. Execute external audits with third-party auditors and maintain relationships
  4. Work across multiple frameworks and regulatory standards, including but not limited to ISO, PCI, NIST, AICPA SOC
  5. Drive improvements in existing processes and develop new innovative and efficient solutions

Skills

Required

  • 4+ years experience leading and performing ISO 27001 audits or in an equivalent technology and compliance related role managing security audits
  • Familiar with GCP cloud computing, AI architectures, Data governance and model validations
  • Certified in security and compliance certifications such as CISSP, CISA, CIA, and CISM
  • Ability to effectively communicate complex requirements to non-technical and technical stakeholders
  • Extensive knowledge of at least 2 or more of the following compliance frameworks (ISO 27001, ISO 27017, ISO 27018, ISO 42001, PCI, SOC, NIST 800-53)
  • BS degree in Business or Management Information Systems or related field OR equivalent work experience
  • Excellent written, verbal communication and presentation skills
  • Willingness to wear different hats and work on areas where needed
  • Amazing organizational skills with a drive to succeed in a fast-paced environment
  • Ability to hustle, get stuff done, and has strong integrity - make mom proud!

Nice to have

  • ISO 27001 Lead Implementer certification and ISO 42001 Lead Auditor certification
  • Big 4 Experience or Management Consulting Experience

What the JD emphasized

  • ISO 42001
  • AI Governance