Staff Engineer, Security Compliance

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We’re hiring a Staff Engineer, Security Compliance to build and operate a high-rigor, audit-ready compliance program across Nscale’s global AI infrastructure.

As a hands-on senior individual contributor, this role sits at the intersection of security, compliance, and engineering. You will work closely with engineering teams to embed compliance into systems and production environments, ensuring controls are implemented, measurable, and verifiable across key frameworks including ISO 27001, SOC 2, and NIST CSF.

This role is critical to how Nscale earns and maintains trust as an AI cloud provider serving enterprise customers. By driving continuous audit readiness, improving control visibility, and reducing manual effort through automation, you will help make compliance a durable and scalable part of our infrastructure.

This role will be part of the global CISO organization.

What you'll be doing

Compliance Program Ownership

• Own and scale compliance programs across ISO 27001, SOC 2, NIST CSF, and applicable regulatory requirements such as NIS2.
• Maintain control mappings to ensure requirements are aligned across frameworks and operational practices.
• Manage evidence repositories and remediation tracking to support a consistent state of audit readiness.

Audit Readiness and Assurance

• Lead audit readiness and execution activities across compliance engagements.
• Engage directly with auditors to support assessments and certification processes.
• Improve evidence quality so controls can be clearly demonstrated and verified.
• Report on audit posture and control effectiveness with clarity and consistency.

Automation and Continuous Monitoring

• Build automation-first compliance systems that support scale and repeatability.
• Implement continuous control monitoring (CCM) approaches to strengthen ongoing assurance.
• Reduce manual compliance work through tooling, integrations, and AI-assisted workflows.

Engineering Partnership and Control Validation

• Partner with engineering teams to implement compliance as code within technical environments.
• Validate that security and compliance controls are operating effectively in production.
• Embed measurable and verifiable controls into systems rather than relying on manual checks.

KPIs

• Audit readiness across ISO 27001, SOC 2, and NIST CSF
• Control effectiveness and verifiability in production
• Reduction in manual compliance processes
• Evidence quality and remediation tracking

About You

• 8–12 years of experience in security compliance, GRC, or assurance
• Deep expertise in ISO 27001, SOC 2, and NIST CSF
• Experience supporting or leading SOC 2 Type II and/or ISO certification efforts
• Strong understanding of cloud infrastructure and security controls
• Experience working directly with engineering teams in technical environments
• Track record of improving efficiency and reducing manual compliance work
• Experience with continuous control monitoring (CCM) is a plus
• Familiarity with GRC tools such as Vanta, Drata, or ServiceNow is beneficial
• Experience in cloud, AI infrastructure, or regulated environments is advantageous
• Relevant certifications such as CISSP, CISM, or ISO Lead Auditor are nice to have

What we can offer you

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.

Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. 🚀

Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨

Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.

Human-First Flexibility: We treat you as humans first. 🫶🏽 Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.

Equal Opportunities Statement

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

If there’s anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.

Salary Range

The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.