ISO 42001 Compliance Manager

Box; Chicago (IL); On-site; USD 129,500 - 175,000; Full time

Benefits offered by this job

Equity opportunities

Comprehensive health benefits

Diversity and inclusion initiatives

Job summary

Box is seeking an experienced Compliance Manager based in Chicago, Illinois. In this role, you will be essential in driving compliance initiatives, focusing on ISO certification for AI governance and managing internal and external stakeholder communications.

The ideal candidate will have 4+ years of relevant experience, with certifications in CISSP or CISA, and the ability to convey compliance strategies across functions. The pay range for this position is $129,500 – $175,000 USD.

Qualifications

• 4+ years experience leading ISO 27001 audits or equivalent role.
• Certified in CISSP, CISA, CIA, and CISM.
• Extensive knowledge of ISO compliance frameworks.

Responsibilities

• Drive Box's annual ISO Certification program.
• Create and own the AIMS program for ISO 42001.
• Execute external audits and maintain auditor relationships.

Skills

ISO 27001 audits

GCP cloud computing

Data governance

Verbal communication

Organizational skills

Education

BS degree in Business or Management Information Systems

Tools

ISO frameworks

NIST standards

Job description

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI‑first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

WHY BOX NEEDS YOU

• We are looking for an experienced and driven Compliance Manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardization (ISO). As our Compliance Manager, you will play a key role in building a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box.
• You will work with all functions of this fast‑paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customers. The right person will be excellent at communicating vertically and horizontally across the company and will be comfortable explaining Box's compliance posture internally and externally, working cross‑functionally and providing technical and creative guidance to technical teams.

WHAT YOU'LL DO

• Drive and lead Box's annual ISO Certification program for AIMS against ISO 42001.
• Create and own the AIMS program and assess AI Governance effectiveness while working with internal teams.
• Execute external audits with third‑party auditors and maintain relationships.
• Work across multiple frameworks and regulatory standards, including but not limited to ISO, PCI, NIST, AICPA SOC.
• Drive improvements in existing processes and develop new innovative and efficient solutions.
• Communicate gaps to management and coordinate cross‑functional team meetings to remediate and close the control gaps.
• Monitor and identify compliance issues and follow up.
• Build relationships with internal and external stakeholders.
• Accurately and effectively communicate our compliance position and programs internally and externally.

WHO YOU ARE

• 4+ years experience leading and performing ISO 27001 audits or an equivalent technology and compliance role managing security audits.
• Familiar with GCP cloud computing, AI architectures, data governance and model validations.
• Certified in security and compliance certifications such as CISSP, CISA, CIA, and CISM.
• Ability to effectively communicate complex requirements to non‑technical and technical stakeholders.
• Extensive knowledge of at least 2 or more of the following compliance frameworks (ISO 27001, ISO 27017, ISO 27018, ISO 42001, PCI, SOC, NIST 800‑53).
• BS degree in Business or Management Information Systems or related field OR equivalent work experience.
• Excellent written, verbal communication and presentation skills.
• Willingness to wear different hats and work on areas where needed.
• Amazing organizational skills with a drive to succeed in a fast‑paced environment.
• Ability to hustle, get stuff done, and has strong integrity – make mom proud!

PREFERRED SKILLS

• ISO 27001 Lead Implementer certification and ISO 42001 Lead Auditor certification.
• Big 4 Experience or Management Consulting Experience.

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles: Box, Inc. and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chance Ordinance.

Notice to applicants in San Francisco: Box, Inc. and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance.

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California‑resident, please read our California Applicant & Candidate Privacy Notice here.

PAY TRANSPARENCY

United States Pay Range: $129,500 – $175,000 USD.

Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks.

In accordance with OFCCP compliance, here is the Pay Transparency Provision.