{"id":2036879,"url":"https://alion.io/job/nscale-senior-audit-program-manager-security-assurance","title":"Senior Audit Program Manager, Security Assurance","company":{"id":48155,"name":"Nscale","domain":"nscale.com","url":"https://alion.io/company/nscale","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":90,"open_postings":27,"ghost_share":0,"stale_share":0.185,"repost_share":0,"time_to_fill_p50_days":63,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","San Francisco, United States","Houston, United States","Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"Kubernetes","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-07T16:09:56Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-17T16:27:25Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"About Nscale\nNscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.\nWe thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.\nAbout the role\nWe're hiring a Senior Audit Program Manager, Security Assurance to lead security audits and certification programs as Nscale scales its global AI infrastructure. This is a senior individual contributor role reporting to the Director, Security Risk & Compliance. You'll lead assigned SOC 2 and ISO 27001 engagements across cloud services, data centers, and corporate functions, from scoping and readiness through external assessment, remediation, and final reporting.\nYou'll join our existing Audit and Assurance team, sharing a growing portfolio of audits, certification activities, and scope expansions. You'll own your assigned engagements and workstreams while maintaining a consistent approach to controls, evidence, and auditor engagement across the portfolio.\nWe're looking for an experienced assurance practitioner who can work directly with engineers, understand how controls operate, and substantiate those controls to external auditors. You'll investigate gaps, bring sound judgment to ambiguous requirements, and recommend practical solutions. You'll also help us scale assurance through reusable evidence, automation, and well-designed workflows.\nWhat you'll be doing\nAudit and Certification Delivery\nLead assigned SOC 2 and ISO 27001 engagements, including readiness assessments, scope expansions, ongoing assessments, and remediation.\nEstablish audit plans with clear boundaries, control owners, evidence requirements, milestones, and dependencies. Coordinate observation periods, fieldwork, and report or certificate delivery with external auditors.\nServe as the primary auditor contact for your engagements. Lead control walkthroughs, prepare technical teams for interviews, and resolve evidence requests and interpretation questions.\nAudit Coordination and Reporting\nManage audit requests, schedules, and status reviews across concurrent engagements. Assign owners, set deadlines, review submissions, document decisions, and drive follow-through on blockers and recovery plans.\nPrepare audit documentation, including application letters, scoping questionnaires, evidence request lists, and management responses. Review draft reports and certification documents for factual accuracy, scope, and consistency with evidence, and coordinate approvals and signatures.\nMaintain an organized, version-controlled record of evidence, correspondence, approvals, and final deliverables. Surface delivery risks early with practical recommendations.\nTechnical Controls and Evidence Quality\nAssess control design and operating effectiveness with engineering, security, IT, and business owners. Translate assessment criteria into clear implementation and evidence requirements.\nReview technical evidence across identity and access management, GPU/compute infrastructure configuration, change management, logging, vulnerability management, backup and recovery, and physical security.\nValidate evidence before submission, including its source, completeness, relevant population, period, and connection to the control being tested.\nInvestigate discrepancies between documented controls and actual operations. Work with owners to correct the control, documentation, or evidence, and maintain accurate control narratives, framework mappings, and relevant Statement of Applicability inputs.\nScope Expansion and Shared Responsibilities\nAssess how new services, sites, entities, and operating models affect audit boundaries and certification coverage. Establish readiness criteria for scope expansion and make coverage gaps and their business implications clear.\nWork with cloud, infrastructure, data center, and colocation teams to distinguish Nscale-operated controls from provider responsibilities and inherited controls.\nEvaluate provider reports and certificates for relevant services, locations, periods, exceptions, and customer responsibilities. Identify where additional evidence or assessment is needed.\nPartner with Customer Trust and Legal to translate validated customer obligations into assurance requirements, and with the SRC TPM to connect them to delivery dependencies.\nFindings and Continuous Assurance\nTurn audit findings and readiness gaps into remediation plans with accountable owners, root causes, due dates, and closure criteria.\nChallenge incomplete fixes, verify remediation evidence, and coordinate retesting and auditor acceptance where required.\nTrack overdue actions, recurring control failures, and changes that could affect upcoming assessments. Support ISMS reviews and internal assurance activities with accurate audit results, control performance, and improvement recommendations.\nAutomation and Program Improvement\nPartner with Compliance Automation to define evidence requirements, identify reliable source systems, and validate automated collection and monitoring outputs.\nBuild reusable evidence and control mappings that reduce repeated requests while preserving each assessment's scope and period requirements.\nImprove audit workflows in Drata and connected delivery tools so owners, evidence, findings, and decisions remain traceable.\nUse AI tools to streamline repeatable assurance work, with appropriate data handling and verification of generated outputs.\nKPIs\nAudit and certification milestone delivery against agreed plans\nEvidence submission readiness, avoidable rework, auditor-query resolution time, and accuracy and completeness of scope records, control ownership, and evidence mappings\nRemediation closure against agreed criteria, overdue findings, and recurring issues\nReduction in duplicated evidence requests and manual effort against a defined baseline\nAbout You\nRequired\n7+ years of experience in security assurance, technology audit, compliance, or related disciplines, including independently leading external audit or certification engagements in technical environments.\nSubstantial hands-on experience with both SOC 2 and ISO 27001, with accountability for delivering audits or assessments through final reports or certification outcomes.\nExperience working directly with external auditors, leading walkthroughs, resolving control and evidence questions, and managing findings through verified closure.\nTechnical fluency in cloud infrastructure and security controls. You can discuss how a control is implemented with engineers and assess whether the evidence supports its claimed design and operation.\nExperience defining assessment scope and understanding shared responsibilities across internal teams, cloud providers, and other service providers.\nStrong program execution across concurrent engagements, including dependency management, prioritization, and timely escalation with practical recommendations.\nAbility to investigate unfamiliar issues independently, distinguish facts from assumptions, and communicate a clear recommendation with supporting evidence.\nClear written communication, including control narratives, remediation requirements, and concise leadership reporting.\nStrong Preferences\nSecurity assurance experience at a cloud service provider, hyperscaler, infrastructure platform, or data center operator.\nExperience expanding audit or certification scope across multiple services, sites, or entities.\nExperience with common control frameworks, evidence reuse, continuous monitoring, and reducing the effort audits require from engineering teams.\nStrong familiarity with AI tools to automate repeatable processes and streamline workflows, with practical examples of improvements to quality or efficiency.\nHands-on experience with Drata or a comparable GRC platform, including control mapping, evidence workflows, and findings management.\nExperience building effective assurance processes in a fast-growing organization with evolving systems and ownership.\nNice to Have\nPrior experience as an external technology auditor or ISO 27001 auditor.\nCISA, CISSP, ISO 27001 Lead Auditor, or equivalent practical expertise.\nAbility to use SQL, scripting, or APIs to inspect evidence and improve reporting.\nExperience with GPU infrastructure, Kubernetes, or infrastructure as code.\nWhat we can offer you\nAt Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.\nHighly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \nJoin one of the fastest-growing AI infrastructure companies - your chance to directly shape how global AI capacity is planned and deployed. \nExpect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy - always with our full support.\nHuman-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.\nEqual Opportunities Statement\nWe strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.\nIf there’s anything we can do to accommodate your specific situation, please let us know.\nThe responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.\nFor information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.\nThe range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.\nSalary Range\n$140,000—$180,000 USD\nFor information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.\nNscale does not accept unsolicited candidate submissions from recruitment agencies.","description_format":"text","description_chars":11143,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-10-07T16:23:37Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 10","filings_12m":10,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":198500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":9,"expected_fill_days":63,"reasons":["conf:2","velocity","win:early","comp:brand,attention"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/nscale-senior-audit-program-manager-security-assurance","json_url":"https://alion.io/job/nscale-senior-audit-program-manager-security-assurance.json","meta":{"generated_at":"2026-10-17T19:12:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2431,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48155},"rest":"https://alion.io/mcp/rest/get_company?id=48155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnscale-senior-audit-program-manager-security-assurance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnscale-senior-audit-program-manager-security-assurance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnscale-senior-audit-program-manager-security-assurance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nscale-senior-audit-program-manager-security-assurance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnscale-senior-audit-program-manager-security-assurance"}]}