ISO 42001 Compliance Manager

Jobtailor; Redwood City (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Jobtailor in the United States is seeking a senior compliance leader to steer ISO 42001 and ISO 27001 programs, coordinating internal teams and external auditors. You will drive risk-based improvements, align with PCI, SOC, and NIST frameworks, and communicate regulatory positions across departments.

The role requires 4+ years leading audits, strong knowledge of GCP and AI governance, and certifications like CISSP/CISA/CISM. Strong communication and cross-functional collaboration are essential.

Qualifications

• 4+ years leading ISO 27001 audits or equivalent security audit management.
• Familiarity with GCP, AI governance, data governance, and model validations.
• Certifications: CISSP, CISA, CIA, CISM.
• Ability to translate complex requirements for technical and non-technical stakeholders.
• Knowledge of ISO 27001, 27017, 27018, 42001, PCI, SOC, NIST 800-53.
• BS degree in Business or MIS or equivalent work experience.
• Excellent written, verbal communication and presentation skills.
• Willingness to work across different areas; strong organizational skills.
• ISO 27001 Lead Implementer and ISO 42001 Lead Auditor preferred.
• Big 4 or management consulting experience preferred.

Responsibilities

• Lead ISO 27001 audits and coordinate security audit programs.
• Collaborate across teams to implement controls and remediate gaps.
• Manage external audits with third-party auditors; maintain relationships.
• Work across ISO, PCI, NIST, and SOC frameworks and regulatory standards.
• Improve processes; develop innovative, efficient solutions.
• Communicate gaps to management and drive remediation.
• Monitor compliance issues and follow up.
• Build relationships with internal and external stakeholders.
• Communicate Box's compliance position internally and externally.
• Provide technical guidance to teams; drive continuous improvement.

Skills

Excellent communication

Cross-functional collaboration

Presentation skills

Relationship building

Organizational skills

Education

BS degree in Business or MIS or related field OR equivalent work experience

Tools

GCP

External Audit Tools

Job description

• Lead Box's annual ISO certification program for AIMS against ISO 42001
• Create and own the AIMS program and assess AI Governance effectiveness with internal teams
• Execute external audits with third-party auditors and maintain relationships
• Work across ISO, PCI, NIST, and AICPA SOC frameworks and regulatory standards
• Improve existing processes and develop innovative, efficient solutions
• Communicate gaps to management and coordinate cross-functional meetings to remediate and close control gaps
• Monitor and identify compliance issues and follow up
• Build relationships with internal and external stakeholders
• Communicate Box's compliance position and programs internally and externally
• Collaborate across functions and provide technical and creative guidance to technical teams
• Drive continuous improvement, communication, and education with internal customers

Requirements

• 4+ years experience leading and performing ISO 27001 audits or in an equivalent technology and compliance related role managing security audits
• Familiarity with GCP cloud computing, AI architectures, data governance, and model validations
• Certification in security and compliance certifications such as CISSP, CISA, CIA, and CISM
• Ability to effectively communicate complex requirements to non-technical and technical stakeholders
• Extensive knowledge of at least 2 or more compliance frameworks, including ISO 27001, ISO 27017, ISO 27018, ISO 42001, PCI, SOC, and NIST 800-53
• BS degree in Business or Management Information Systems or related field OR equivalent work experience
• Excellent written, verbal communication, and presentation skills
• Willingness to work across different areas as needed
• Strong organizational skills
• ISO 27001 Lead Implementer certification and ISO 42001 Lead Auditor certification (preferred)
• Big 4 Experience or Management Consulting Experience (preferred)
• Must work from the assigned office a minimum of 3 days per week

Core Competencies

Demonstrates expertise in leading ISO certification programs, particularly ISO 42001 and ISO 27001, while effectively communicating compliance requirements to diverse stakeholders. Proven ability to drive continuous improvement and manage security audits within various compliance frameworks.

Highest-signal resume keywords

• ISO 42001 Certification Program Management
• ISO 27001 Audit Leadership
• GCP Cloud Computing Familiarity
• CISSP Certification
• Compliance Framework Knowledge

ATS Optimization Keywords

Hard Skills

• ISO 27001 Audits
• AI Governance Assessment
• Data Governance
• Model Validation
• Compliance Monitoring
• Process Improvement
• External Audit Execution
• Control Gap Remediation
• Technical Guidance
• Cross-Functional Collaboration

Soft Skills

• Excellent Communication Skills
• Strong Organizational Skills
• Relationship Building
• Presentation Skills
• Collaboration

Certifications & Qualifications

• CISSP
• CISA
"CIA"
• CISM
• ISO 27001 Lead Implementer
• ISO 42001 Lead Auditor

Industry Keywords

• ISO 42001
• ISO 27001
• ISO 27017
• ISO 27018
• PCI
• SOC
• NIST 800-53
• AICPA
• Big 4 Experience
• Management Consulting Experience