Iso 42001 Compliance Manager Jobs

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. Snowflake is growing and looking for a driven IT Audit Senior to join our team. You will report to the Manager, IT Internal Audit and help with an evolving workload with minimal supervision in a fast-paced environment. Whether it is facilitating Snowflake’s SOX compliance efforts or conducting internal audits, we strive to enhance the effectiveness, efficiency and scalability of the company’s processes, systems, and underlying internal control environment. You will be expected to problem solve, collaborate, and move fast while keeping attention to detail. Responsibilities: Execute and support our IT internal controls assessments, other IT audits and investigations. Design and implement automated, data-driven audit procedures using SQL, Python, or AI coding tools like Cortex Code (in Snowflake) move toward real-time monitoring of security compliance. Partner with Engineering and Product teams to audit secure software development lifecycles (SDLC) and CI/CD pipeline security. Conduct internal compliance review, ensuring adherence to frameworks like ISO 27001, ISO 42001, ISO 22301, or ISO 27017. Lead audits of cloud infrastructure (AWS, Azure, GCP) focusing on identity and access management (IAM), encryption, and network security configurations rather than just general IT cont

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Primary Job Responsibilities Include: Lead and conduct EHS&S audits to ensure compliance with regulatory bodies, Micron EHS internal standards, and external international standards such as ISO 14001, ISO 45001, ISO 50001, and RBA. Coordinate audit schedules between multiple international sites with internal and external business partners, including Customer Support and other RBA-related collaborators. Develop and implement corrective action plans to ensure timely completion and follow-up audits when required. Participate in nonconformity review and root cause analysis to identify and address systemic issues. Analyze audit data for trends and systemic issues to demonstrate the effectiveness of the audit program. Leverage AI-enabled tools and advanced analytics to enhance audit planning, risk assessment, trend identification, corrective action management, and management system performance monitoring. Identify and implement digital and AI-driven process improvements to improve audit efficiency, strengthen assurance insights, and support continuous improvement of EHS&S management systems. Monitor and evaluate process connectivity to find opportunities for improvement and ensure that EHS&S management systems are effectively supporting overall business goals. Ensure continuous improvement of EHS&S management systems through lessons learned and adoption of bes

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer to own and scale our security and AI governance compliance posture as SpaceXSI grows. You will set the standards the organization builds to, design and implement controls, and automate the unglamorous parts of compliance so a fast-moving team can ship safely. The ideal candidate combines deep fluency across modern security and AI frameworks with GRC engineering skills: you translate control requirements into technical implementations, partner with engineers to bake compliance into architecture and CI/CD, and replace point-in-time checklist work with continuous, engineered assurance. You will collaborate across engineering, legal, product, and leadership to keep our AI systems audit-ready across enterprise, commercial, and public-sector environments. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Own and execute security compliance implementation and audits across core frameworks including SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and the EU AI Act, including control de

Job Summary The Senior IMS Specialist II serves as a senior subject matter expert for the Integrated Management System (IMS), providing technical leadership and guidance to ensure effectiveness, conformity, and continual improvement of management system processes supporting ISO 9001, ISO 14001, and ISO 45001. This role is responsible for planning, leading, and enhancing the internal audit program while driving initiatives that strengthen operational performance, support compliance obligations, and advance the organization's quality, environmental, occupational health and safety, and strategic business objectives. The position leads internal audits, evaluates management system effectiveness, identifies risks and improvement opportunities, and collaborates across functions to ensure alignment with international standards, regulatory requirements, and company expectations. The Senior IMS Specialist II plays a key role in the development, implementation, and continual evolution of the DCE 9000 standard and supports organizational readiness for emerging ISO 9001 and ISO 14001 standard revisions. Acting as a catalyst for organizational improvement, this role facilitates structured problem-solving activities, leads continual improvement initiatives, and partners with stakeholders at all levels to optimize processes, enhance business performance, and increase customer value. The position also contributes to the development and execution of IMS strategies, roadmaps, and programs that support organizational priorities and long-term business goals. This is an individual contributor role without direct people management responsibilities. However, the Senior IMS Specialist II provides leadership through expertise, influence, and collaboration, leading cross-functional efforts, driving accountability, and delivering results across the organization without formal supervisory authority. Responsibilities Lead and continuously improve the Integrated Management Syste

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. About the Team The Information Security organization at Postman operates across three pillars: Governance Risk & Compliance (GRC), Product Security, and Security Operations. We are a team of builders, not checkbox-checkers. We hold active SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA compliance postures, and we are pursuing FedRAMP High and CMMC Level 2 authorization. Our security stack includes Wiz, SentinelOne, Okta, Jamf, and 1Password, and we operate across a multi-cloud environment. The Offensive Security team is the "red" pulse of this organization. We don't just find bugs — we simulate the adversary to ensure our defenses hold up under real-world pressure. We focus on continuous security validation, AI-augmented adversary emulation, and offensive AI security research at Postman's scale. The Opportunity We are looking for a Principal Offensive Security Engineer who is as much a strategist as they are a hacker. You will own the strategic direction of Postman's offensive security program — including building out a dedicated Offensive AI Security capability from the ground up — and operat

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

REQUISITOS MANDATÓRIOS •Pacote Microsoft Office; •Conhecimento das normas de sistemas de gestão integrada (Ex.: ISO 45001, ISO 14001, ISO 9001); •Conhecimento funcional SAP ERP ou Sistema Informatizado de Registro de Anomalias; Será necessário ART de cargo e função para esse posto de serviço. EXPERIÊNCIA experiência em atividades similares ao escopo dos serviços. ESCOLARIDADE Grau de Instrução: Pós graduação Formação: Formação em engenharia com Pós-graduação em Engenharia de Segurança do Trabalho, com registro em conselho profissional. ATRIBUIÇÕES Elaborar e/ou atualizar painéis no powerBi que facilitem a gestão sobre os temas de contingência (ex. Acompanhamento do Plano de Manutenção dos Ativos de Contingências, Teste de Performance de Bombas, Cronograma de Simulados, entre outros); Realizar gestão dos treinamentos relacionados a contingência, buscando novas oportunidades e conteúdos a serem compartilhados; Apoiar o planejamento e acompanhar exercícios simulados nas Unidades Operacionais; Propor ações para aprimoramento dos conhecimentos das lideranças no que tange o ICS – Sistema de Comando de Incidente; Acompanhar a implantação das recomendações de contingência oriundas dos estudos de análises de risco de processo e outras inspeções/diagnósticos; Apoiar na elaboração e/ou revisão dos Planos de Resposta a Emergência – PRE das unidades do parque de refino, processamento de gás, DTEN e LCM, bem como os PRE-SOs, Planos Locais e PROs; Assessorar, do ponto de vista da engenharia de segurança, assuntos relacionados à preparação e atendimento a emergências; Apoiar na revisão de procedimentos e padrões relacionados ao tema de gestão de contingência; Realizar apresentações tais como RAC de SMS, Subcomissão, entre outras, sobre o tema de Contingência; Acompanhar a implantação das recomendações de contingência oriundas dos estudos de análises de risco de processo; Auditoria de conformidade de barreiras de proteção identificadas nos estudos de risco de proc

Formação complementar: Mandatório: Inglês avançado; Desejável formação em sistemas de gestão de SMS; Interpretação das Normas ISO 14001 e ISO 45001 (SMS em contratos); Para embarques eventuais: T-HUET, CBSP. Tempo de Experiência: Experiencia em atividades correlatas ao escopo do serviço. Conhecimentos Obrigatórios: Pacote Microsoft Office avançado; Power BI; Domínio em práticas para adoção de medidas de gerenciamento (mediante Inspeções, Auditorias e Acompanhamento de Planos de Ação); Apoio na elaboração de Análises Preliminares de Risco (APR), HAZOP (Avaliação de Perigos na Operabilidade de Sistemas) e Análises Quantitativas de Riscos (AQR) de novos empreendimentos ou existentes; Experiência em atividades em plantas industriais; Participação em planejamento de simulados de emergências de grande amplitude em plantas industriais. Sobre a CAPCO: Na Capco promovemos uma cultura inclusiva. Valorizamos a diversidade em todas as suas expressões. Pensamos, em conjunto , sempre em ações diversas de inclusão e de responsabilidade social através de comitês internos geridos pela nossa comunidade interna, como os grupo de Mulheres, Pessoas Com Deficiência, Pessoas Negras, LGBTQIAPN+, Parentalidade, Gerações, entre outros. Nossas oportunidades são trabalhadas para todos(as)!!! #LifeAtCapco PRÓXIMOS PASSOS: Se você está ansioso(a) para progredir sua carreira conosco, candidate-se e aguarde o contato de um de nossos recrutadores!

About the job Build the operating system that helps Graphcore scale quality, resilience and production readiness. As an Integrated Management Systems Engineer, you will help shape the Graphcore way. This is our integrated approach to practical, scalable management systems. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable ways of working. Your impact will reach engineering, operations, suppliers and corporate teams. Lead the delivery of the Integrated Management System internal audit programme, including audit planning and execution, reporting findings, agreeing corrective actions with process owners, and monitoring actions through to effective closure. The team and culture You will work with Manufacturing Operations and Quality, partnering closely with engineering, operations and process owners. Work happens through direct problem solving, clear ownership and practical decisions. This role needs someone who can move between standards, systems and real workflows. You will challenge complexity and help teams build processes that people actually use. Decisions are grounded in evidence, risk and operational reality. You will be expected to speak up, take responsibility and help Graphcore improve at pace. This Team work x3 days a week in the Bristol office. What we’re looking for · Strong understanding of ISO 9001 principles in engineering or technology-led organisations · Lead auditor qualification in ISO/IEC 27001, ISO 45001, ISO 22301 or ISO 9001 · Experience designing or improving management system processes · Ability to translate standards into practical operating models · Experience working in complex product development environments · Structured problem-solving skills, such as A3, 5 Whys or Ishikawa Benefits · Flexible working: Balance your work and personal life with greater flexibility, with an expectation to be in 2-3 days/week · Generous leave: Take time to rest, recharge and enjoy life outside of work · Retirement planni