Director, Enterprise Risk

Box•Redwood City, CA

40d•Hybrid

About The Position

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It's the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. We are seeking an experienced Enterprise Risk Director to own Box's Enterprise Risk Management function - with an initial emphasis on Cybersecurity and Technology. You will drive the vision, strategy, and execution for Risk at Box, working cross-functionally with leaders across this fast-paced, rapidly changing business - driving risk management processes, data analytics, and support continuous efforts to build and mature the program and make risk real and actionable. The right person will be excellent at communicating vertically and horizontally with diverse stakeholders, and be equally comfortable with execution and discussing Risk strategy with senior executives and the Board of Directors' Audit Committee.

Requirements

People leader with experience leading Enterprise Risk at scale.
8+ years experience in operational or technology risk management. 5+ years direct people leadership experience.
Proven ability to communicate complex risk concepts to non-technical stakeholders
Natural listener and excellent written, verbal communication and presentation skills
Passionate about risk and driving positive change, and adept at juggling competing priorities.
Ability to hustle, get stuff done, and have strong integrity - make mom proud!

Nice To Haves

Experience with SaaS, IaaS or PaaS and knowledge of COSO, ISO, or NIST risk frameworks is preferred but not required.

Responsibilities

Champion a Risk mindset at Box and set the strategy, tone and direction for making risk real and actionable at Box.
Maintain Box's risk register, run our annual Enterprise and Fraud Risk Assessments and table-top exercises with senior executives and the Board, and support ad-hoc risk assessments.
Collaborate with key stakeholders to evaluate and mitigate risk at the company and translate risk insights into improved decision-making and enterprise-wide policies.
Facilitate the evaluation and treatment of risks, including triaging new issues, partnering with subject matter experts, and driving risk treatment to conclusion.
Conduct root cause analysis on new and recurring issues to enhance process efficiency and reduce exception requests.
Drive improvements in existing processes or tools, and develop new, innovative, and efficient solutions
Manage and analyze risk data to identify trends and issues in need of further analysis or escalation.
Contribute to the design of cybersecurity strategies by advising on risk reduction priorities related to exception and risk register trends.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume