Iso 42001 Compliance Manager Jobs

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU We are looking for an experienced and driven Compliance manager who is looking to put their auditing experience, technical expertise, and information security knowledge to plan, execute and deliver on existing and strategic new Compliance certifications focused on International Organization for Standardizations (ISO). As our Compliance manager, you will play a key role to build a scalable and efficient program and process related to the Artificial Intelligence Management Systems (AIMS) (ISO 42001) and AI governance within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customer

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you’ll do Act as a primary point of accountability for customer trust enablement, including participation in customer meetings, security reviews and AI governance. Contribute to AI Governance including building guardrails to align with AI regulations (EU AI Act, ISO 42001, NIST AI RMF and local EU laws). Partner closely with Legal and Privacy to interpret regulatory requirements and support complex, security-sensitive contractual discussions, escalating risks and tradeoffs appropriately. Collaborate with Engineering and Product to ensure expectations are reflected in system design and operational effectiveness. Translate regulatory and privacy expectations into scalable, region-aware technical controls across model governance, agent security and safety

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you'll do Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks. Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting. Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms. Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. Snowflake is growing and looking for a driven IT Audit Senior to join our team. You will report to the Manager, IT Internal Audit and help with an evolving workload with minimal supervision in a fast-paced environment. Whether it is facilitating Snowflake’s SOX compliance efforts or conducting internal audits, we strive to enhance the effectiveness, efficiency and scalability of the company’s processes, systems, and underlying internal control environment. You will be expected to problem solve, collaborate, and move fast while keeping attention to detail. Responsibilities: Execute and support our IT internal controls assessments, other IT audits and investigations. Design and implement automated, data-driven audit procedures using SQL, Python, or AI coding tools like Cortex Code (in Snowflake) move toward real-time monitoring of security compliance. Partner with Engineering and Product teams to audit secure software development lifecycles (SDLC) and CI/CD pipeline security. Conduct internal compliance review, ensuring adherence to frameworks like ISO 27001, ISO 42001, ISO 22301, or ISO 27017. Lead audits of cloud infrastructure (AWS, Azure, GCP) focusing on identity and access management (IAM), encryption, and network security configurations rather than just general IT cont

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. What you'll do: Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA. Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure. Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble. Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners. Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion. Manage the lifecycle of certifications end-to-end, including retirements and transiti

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Primary Job Responsibilities Include: Lead and conduct EHS&S audits to ensure compliance with regulatory bodies, Micron EHS internal standards, and external international standards such as ISO 14001, ISO 45001, ISO 50001, and RBA. Coordinate audit schedules between multiple international sites with internal and external business partners, including Customer Support and other RBA-related collaborators. Develop and implement corrective action plans to ensure timely completion and follow-up audits when required. Participate in nonconformity review and root cause analysis to identify and address systemic issues. Analyze audit data for trends and systemic issues to demonstrate the effectiveness of the audit program. Leverage AI-enabled tools and advanced analytics to enhance audit planning, risk assessment, trend identification, corrective action management, and management system performance monitoring. Identify and implement digital and AI-driven process improvements to improve audit efficiency, strengthen assurance insights, and support continuous improvement of EHS&S management systems. Monitor and evaluate process connectivity to find opportunities for improvement and ensure that EHS&S management systems are effectively supporting overall business goals. Ensure continuous improvement of EHS&S management systems through lessons learned and adoption of bes

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer to own and scale our security and AI governance compliance posture as SpaceXSI grows. You will set the standards the organization builds to, design and implement controls, and automate the unglamorous parts of compliance so a fast-moving team can ship safely. The ideal candidate combines deep fluency across modern security and AI frameworks with GRC engineering skills: you translate control requirements into technical implementations, partner with engineers to bake compliance into architecture and CI/CD, and replace point-in-time checklist work with continuous, engineered assurance. You will collaborate across engineering, legal, product, and leadership to keep our AI systems audit-ready across enterprise, commercial, and public-sector environments. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Own and execute security compliance implementation and audits across core frameworks including SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and the EU AI Act, including control de

Job Summary The Senior IMS Specialist II serves as a senior subject matter expert for the Integrated Management System (IMS), providing technical leadership and guidance to ensure effectiveness, conformity, and continual improvement of management system processes supporting ISO 9001, ISO 14001, and ISO 45001. This role is responsible for planning, leading, and enhancing the internal audit program while driving initiatives that strengthen operational performance, support compliance obligations, and advance the organization's quality, environmental, occupational health and safety, and strategic business objectives. The position leads internal audits, evaluates management system effectiveness, identifies risks and improvement opportunities, and collaborates across functions to ensure alignment with international standards, regulatory requirements, and company expectations. The Senior IMS Specialist II plays a key role in the development, implementation, and continual evolution of the DCE 9000 standard and supports organizational readiness for emerging ISO 9001 and ISO 14001 standard revisions. Acting as a catalyst for organizational improvement, this role facilitates structured problem-solving activities, leads continual improvement initiatives, and partners with stakeholders at all levels to optimize processes, enhance business performance, and increase customer value. The position also contributes to the development and execution of IMS strategies, roadmaps, and programs that support organizational priorities and long-term business goals. This is an individual contributor role without direct people management responsibilities. However, the Senior IMS Specialist II provides leadership through expertise, influence, and collaboration, leading cross-functional efforts, driving accountability, and delivering results across the organization without formal supervisory authority. Responsibilities Lead and continuously improve the Integrated Management Syste

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Our Lead Auditors work with a diverse client base spanning construction, manufacturing, chemicals, facilities management, engineering, transport, warehousing, and more. You will deliver independent, evidence-based third-party audits that provide organisations with clear insight into the effectiveness of their management systems. We are particularly interested in individuals with strong hands-on industry experience and a sound understanding of operational environments, compliance frameworks, and regulatory requirements. Previous auditing experience is advantageous but not essential. Following Global and Divisional inductions, you will complete a structured 12-week training programme combining structured learning, supervised on-site audit experience, and shadowing. This programme leads to qualification in ISO 9001, ISO 14001, and ISO 45001, equipping you with the knowledge and confidence to succeed as a certified Lead Auditor. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Our Lead Auditors work with a diverse client base spanning construction, manufacturing, chemicals, facilities management, engineering, transport, warehousing, and more. You will deliver independent, evidence-based third-party audits that provide organisations with clear insight into the effectiveness of their management systems. We are particularly interested in individuals with strong hands-on industry experience and a sound understanding of operational environments, compliance frameworks, and regulatory requirements. Previous auditing experience is advantageous but not essential. Following Global and Divisional inductions, you will complete a structured 12-week training programme combining structured learning, supervised on-site audit experience, and shadowing. This programme leads to qualification in ISO 9001, ISO 14001, and ISO 45001, equipping you with the knowledge and confidence to succeed as a certified Lead Auditor. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Our Lead Auditors work with a diverse client base spanning construction, manufacturing, chemicals, facilities management, engineering, transport, warehousing, and more. You will deliver independent, evidence-based third-party audits that provide organisations with clear insight into the effectiveness of their management systems. We’re particularly interested in candidates with hands-on structural steel experience and a strong understanding of operational, compliance, and regulatory environments. Previous auditing experience is advantageous but not essential. Following Global and Divisional inductions, you will complete a structured 12-week training programme combining structured learning, supervised on-site audit experience, and shadowing. This programme leads to qualification in ISO 9001, ISO 14001, and ISO 45001, equipping you with the knowledge and confidence to succeed as a certified Lead Auditor. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional and national travel (inc

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Our Lead Auditors work with a diverse client base spanning construction, manufacturing, chemicals, facilities management, engineering, transport, warehousing, and more. You will deliver independent, evidence-based third-party audits that provide organisations with clear insight into the effectiveness of their management systems. We are particularly interested in individuals with strong hands-on industry experience and a sound understanding of operational environments, compliance frameworks, and regulatory requirements. Previous auditing experience is advantageous but not essential. Following Global and Divisional inductions, you will complete a structured 12-week training programme combining structured learning, supervised on-site audit experience, and shadowing. This programme leads to qualification in ISO 9001, ISO 14001, and ISO 45001, equipping you with the knowledge and confidence to succeed as a certified Lead Auditor. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional