ISO Compliance Manager

• Lead Box's annual ISO certification program for AIMS against ISO 42001
• Create and own the AIMS program and assess AI Governance effectiveness with internal teams
• Execute external audits with third-party auditors and maintain relationships
• Work across ISO, PCI, NIST, and AICPA SOC frameworks and regulatory standards
• Improve existing processes and develop innovative, efficient solutions
• Communicate gaps to management and coordinate cross-functional meetings to remediate and close control gaps
• Monitor and identify compliance issues and follow up
• Build relationships with internal and external stakeholders
• Communicate Box's compliance position and programs internally and externally
• Collaborate across functions and provide technical and creative guidance to technical teams
• Drive continuous improvement, communication, and education with internal customers

• 4+ years experience leading and performing ISO 27001 audits or in an equivalent technology and compliance related role managing security audits
• Familiarity with GCP cloud computing, AI architectures, data governance, and model validations
• Certification in security and compliance certifications such as CISSP, CISA, CIA, and CISM
• Ability to effectively communicate complex requirements to non-technical and technical stakeholders
• Extensive knowledge of at least 2 or more compliance frameworks, including ISO 27001, ISO 27017, ISO 27018, ISO 42001, PCI, SOC, and NIST 800-53
• BS degree in Business or Management Information Systems or related field OR equivalent work experience
• Excellent written, verbal communication, and presentation skills
• Willingness to work across different areas as needed
• Strong organizational skills
• ISO 27001 Lead Implementer certification and ISO 42001 Lead Auditor certification (preferred)
• Big 4 Experience or Management Consulting Experience (preferred)
• Must work from the assigned office a minimum of 3 days per week

Demonstrates expertise in leading ISO certification programs, particularly ISO 42001 and ISO 27001, while effectively communicating compliance requirements to diverse stakeholders. Proven ability to drive continuous improvement and manage security audits within various compliance frameworks.

• ISO 42001 Certification Program Management
• ISO 27001 Audit Leadership
• GCP Cloud Computing Familiarity
• CISSP Certification
• Compliance Framework Knowledge

• ISO 27001 Audits
• AI Governance Assessment
• Data Governance
• Model Validation
• Compliance Monitoring
• Process Improvement
• External Audit Execution
• Control Gap Remediation
• Technical Guidance
• Cross-Functional Collaboration

• Excellent Communication Skills
• Strong Organizational Skills
• Relationship Building
• Presentation Skills
• Collaboration

• CISSP
• CISA
"CIA"
• CISM
• ISO 27001 Lead Implementer
• ISO 42001 Lead Auditor

• ISO 42001
• ISO 27001
• ISO 27017
• ISO 27018
• PCI
• SOC
• NIST 800-53
• AICPA
• Big 4 Experience
• Management Consulting Experience