Staff Product Manager, AI Infrastructure and Compliance

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

WHY BOX NEEDS YOU

Enterprise customers want to unlock the power of AI while maintaining the security, governance, compliance, and administrative controls they expect from Box. As AI agents become capable of accessing enterprise content and taking actions across business workflows, these capabilities become even more critical.

We’re looking for a Staff Product Manager to lead AI Infrastructure and Compliance — a foundational product area for delivering enterprise-grade AI and enabling some of Box’s most strategic customers to adopt AI at scale.

You will define how organizations govern AI across Box: how AI activity is permissioned, stored, audited, and controlled; how agents are protected against AI-specific security risks; how administrators set guardrails and model policies; and how Box AI meets demanding regulatory and compliance requirements such as FedRAMP, DoD Impact Levels, and Export Control. You will also shape how AI integrates with Box’s existing Governance and Shield capabilities so customers can extend the policies they already trust to AI-powered experiences.

This is a broad and technically complex product area that sits at the intersection of AI, security, content permissions, governance, and platform architecture. You’ll work closely with architects, engineering leaders, security and compliance teams, and product teams across Box to establish common capabilities that can be consistently applied across Box AI experiences.

If you enjoy solving technically deep platform problems, bringing clarity to ambiguous spaces, and aligning teams around architectural decisions that unlock major customer opportunities, this role is for you.

WHAT YOU’LL DO

• Own the strategy and roadmap for AI Infrastructure to support that AI has the right AI Admin, Governance & Compliance, defining the foundational controls enterprises need to deploy AI and agents securely and at scale.
• Define how AI sessions and agent activity are permissioned, stored, and governed across Box products, including experiences such as Box Automate.
• Build enterprise-grade auditability and observability for AI, enabling customers to understand and govern how users and agents interact with enterprise content.
• Define Box’s Agent platform approach for handing AI security use cases.
• Build administrative controls for model selection and policy enforcement, giving organizations control over which AI models can be used based on their security, compliance, and business requirements.
• Partner with Security, Legal, Compliance, Product and Engineering to meet requirements including FedRAMP, DoD Impact Levels, Export Control, EU AI Act, and other enterprise and government standards.
• Partner with SEC Product to define how existing Box Governance and Box Shield policies extend to AI and agent experiences, creating a consistent governance model across content, users, and agents.
• Establish common platform capabilities and policies that work consistently across Box agents, Box Automate, and third-party agents accessing Box through MCP.
• Partner deeply with enterprise architects and engineering leaders on complex areas including Box’s file system, permissions, agent identity and authorization, and AI security architecture.
• Drive alignment across multiple product and engineering organizations, resolving architectural and product trade-offs and establishing clear ownership across shared platform capabilities.
• Work directly with strategic enterprise customers and GTM teams to understand AI governance requirements, unblock adoption, and translate customer needs into scalable platform capabilities.
• Communicate strategy, architectural trade-offs, roadmap priorities, and outcomes clearly to executives and cross-functional stakeholders.
• Manage models and lifecycles for models to ensure model neutrality and compliance for our customers.

WHO YOU ARE

• You have 7+ years of product management experience, including significant experience owning technically complex platform, security, governance, compliance, infrastructure, or enterprise products.
• You have a strong technical foundation and can engage deeply with architects and senior engineers on system architecture, APIs, identity and permissions, data models, and platform trade-offs.
• You understand enterprise security, governance, and compliance and can translate complex requirements into scalable product capabilities rather than one-off solutions.
• You have experience with, or a strong understanding of, AI/ML systems and emerging AI security risks, particularly those associated with agents, tool use, permissions, and autonomous actions.
• You are comfortable navigating complex systems involving content storage, permissions, identity, authorization, auditability, and policy enforcement.
• You have demonstrated success driving products that require coordination across multiple engineering and product teams, where ownership and technical dependencies extend beyond a single team.
• You can operate effectively at Staff level: defining strategy in ambiguous spaces, identifying the most important problems, making difficult prioritization decisions, and influencing leaders without relying on organizational authority.
• You are an exceptional communicator who can translate complex technical and compliance topics into clear decisions for engineers, customers, executives, and other stakeholders.
• You have experience working directly with large enterprise customers and understand the security, governance, and administrative requirements that influence enterprise technology adoption.
• Experience with FedRAMP, DoD impact levels, export controls, data governance, DLP, or security policy platforms is a strong plus.
• Experience building AI agents, AI platforms, security or compliance products, or enterprise content systems is a strong plus.
• We are an AI-first company. You approach your work with a growth mindset and actively leverage AI to make faster, smarter decisions and increase your impact.

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here. 

Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here. 

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here.