Senior Counsel, Digital Regulations
About the position At Box, we don’t just manage content; we’re 10X-ing how the world works through secure, AI-driven collaboration. As the global regulatory landscape for digital platform services and artificial intelligence (AI) continues to shift, we need a visionary Digital Regulation Counsel that will be central to navigating our regulatory strategy. This isn't a role for a spectator. You will lead and orchestrate our cross-enterprise digital regulatory strategy, translating complex legislation like the EU AI Act to U.S. federal and state policies, laws, frameworks and beyond by partnering with key stakeholders to develop scalable, jurisdiction-agnostic guardrails. You are the bridge between cutting-edge innovation and working with subject matter experts to create real and meaningful operationalization, ensuring Box remains a leader at scale while staying ahead of the curve.
Responsibilities
- Drive regulatory leadership: Draft internal and external policy positions and responses for comment periods. Translate shifting standards, rules, and frameworks into positions that can be defended as they become legally enforceable.
- Architect compliance: Convert high‑risk digital obligations into clear business impacts and partner with legal and other cross-functional stakeholders to implement controls that support compliance and operational teams, such as monitor new and evolving incident reporting and notification requirements like EU NIS2 and US state-level laws, assess their applicability, and work with teams to design and implement processes.
- Horizon scan: Identify emerging regulatory proposals such as, in the U.S., E.U., CN, JPN, and U.K. early, before they become law.
- Orchestrate delivery: Lead cross‑functional workstreams (Legal, Product, Engineering, Governance, Risk, Compliance) using DACI models to ensure smooth regulatory implementation.
- Hand off to operations: Transition completed regulatory projects to steady‑state owners that are responsible for maintaining compliance and audit readiness.
Requirements
- Experienced Regulatory Navigator: You have 5+ years of experience engaging with regulators and elected officials specifically in digital regulations (e.g., US Congress, Federal Trade Commission, Departments of Justice or Commerce, and/or global equivalents). Skilled at presenting and negotiating proposed legislation, rules, and standards with regulators and policymakers to minimize operational disruption and protect strategic interests.
- Regulatory Preparedness Expert: You are a master of horizon scanning and cutting through ambiguity to get things done, capable of quickly synthesizing the enterprise-wide impact of global rules like the NIST AI Risk Management Framework, EU AI Act, Colorado AI Act, and the EU Digital Services Act.
- Experienced Legal Strategist: You hold a JD or equivalent with significant experience in digital regulation
- Savvy Standards Architect: You don’t just read the law; you understand the technical scaffolding behind it. You have deep familiarity with translating digital regulatory legal requirements into internal processes.
- Master Orchestrator: You thrive on turning legal ambiguity into organized, programmatic reality. You have a proven track record of leading complex, cross-functional programs across Legal, Product, and Engineering to ensure a company remains compliant and audit-ready.
- Collaborative Leader: You have the executive presence to brief leadership but the humility to build deep working relationships with domain-specific counsel, maintaining deep trusted relationships with subject matter experts and technical stakeholders.
- AI-First Thinker: You see emerging tech as a strategic opportunity, not just a risk. You have a growth mindset and use AI to make smarter, faster decisions.
Apply tot his job Apply To this Job