{"id":2001617,"url":"https://alion.io/job/volta-security-engineer-compliance-focus","title":"Security Engineer, Compliance Focus","company":{"id":3862918,"name":"Volta","domain":"volta.com","url":"https://alion.io/company/volta-7","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States","London, United Kingdom"],"countries":["US","GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":154000,"max_usd":301000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":364},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"HPC","optional":true},{"name":"ISO 42001","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-07-29T13:44:49Z","employer_posted_date":"2026-07-29","last_verified_at":"2026-10-11T16:00:23Z","board_verified":true,"closed_at":null,"days_open":74,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":74},"description":"About Volta\nVolta is the category-defining, fully vertically integrated AI infrastructure platform - from capital to clusters to software, under a founder-led enterprise. Our mission is The Utility of Compute™: AI infrastructure as dependable and available as electricity, for every organization that needs it. Launched with a $10B strategic partnership with one of the leading frontier AI labs, a Series A led by Andreessen Horowitz, and a $5B AI Infrastructure Fund, Volta is building the infrastructure layer of the AI era from the ground up. We are 100+ people across London, Palo Alto, and New York, with rapid growth expectations to hundreds.\nAbout The Role\nVolta builds and operates large scale GPU compute infrastructure for frontier AI customers. Those customers hold us to real security obligations, written into contracts with dates attached, and our lenders and investors examine our security posture as part of financing. Compliance here is not a paperwork exercise at the edge of the business. It is a condition of doing business.\nWe are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure in several countries, and deploying into partner data centers. The Senior Manager, Cyber Security Engineering owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well.\nThis is a compliance role on an engineering team. You will spend as much time with platform and infrastructure engineers as with documents, and you will need to be able to tell whether a control is actually working or only described.\nWhat You Will Be Doing\nCompliance Execution\nImplement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline.\n\nOperate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls.\n\nCollect, organize, and quality-check evidence so that it is complete, current, and defensible when an auditor asks for it.\n\nMaintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions.\n\nSupport internal audit and management review with the data and analysis they need.\n\nAudit Support\nPrepare evidence packages and control walkthroughs ahead of audit fieldwork.\n\nSupport auditors during fieldwork, gathering what they request and coordinating the engineers who need to answer.\n\nTrack findings through to closure and verify that corrective actions actually took effect.\n\nCustomer and Contractual Obligations\nMap the security obligations in customer contracts to specific controls, and flag where we do not yet meet them.\n\nDraft responses to customer security questionnaires and due diligence requests for review, keeping answers consistent with what we actually do.\n\nPrepare material supporting lender and investor due diligence on security and compliance.\n\nRisk and Third Parties\nCarry out risk assessments and vendor and third-party security reviews, and document the results.\n\nMaintain the exception register so that accepted risk stays visible, owned, and time-bound.\n\nSupport the physical security control set at our sites and offices, working with the local contact at each location.\n\nRegulatory\nMaintain the records and reporting needed for regulatory obligations across our footprint, including NIS2 registrations and national authority contacts, and GDPR-related documentation.\n\nWorking With Engineering\nTurn control requirements into concrete, schedulable work with platform and infrastructure teams, and follow it through to done.\n\nAutomate evidence collection wherever possible. Anything depending on someone remembering a quarterly screenshot will eventually fail an audit.\n\nSupport security awareness training delivery, business continuity documentation, and DR test evidence.\n\nHandle the compliance side of incidents: records, notification tracking, and corrective action follow-up.\n\nWhat You Bring\n3+ years in information security, with a meaningful part of it in compliance, GRC, or audit-facing work.\n\nHands-on experience working within an ISO 27001 or SOC 2 program, including preparing evidence and supporting an external audit.\n\nWorking knowledge of technical controls in a cloud or infrastructure environment. You should be able to read a system design and form a view on whether a control is real, and hold that view in a conversation with the engineer who built it.\n\nExperience with a GRC platform such as Vanta, Drata, or equivalent, including maintaining integrations rather than only using the dashboard.\n\nPractical exposure to risk assessment and documentation.\n\nStrong writing. Evidence, procedures, and customer-facing responses all have to be clear and hold up under scrutiny.\n\nOrganized and persistent. Much of this role is knowing what is outstanding, whose it is, and when it is due, without needing to be reminded.\n\nAble to work with engineers as a partner rather than a gate. You will get more done by making the compliant path the easy one than by escalating.\n\nComfortable in a company where the program is being built rather than inherited, and where the process for something often does not exist yet.\n\nFluency with AI-assisted workflows for evidence handling, questionnaire response, and documentation.\n\nNice to Have (But Not Essential)\nFamiliarity with NIS2, or with correspondence with national authorities such as the BSI.\n\nExposure to cloud, IaaS, HPC, or data center environments, and the physical security controls that come with colocation.\n\nExperience supporting enterprise or hyperscaler customer security reviews.\n\nScripting ability in Python or similar for automating evidence collection and reporting.\n\nAwareness of ISO 42001 or emerging AI-specific assurance frameworks.\n\nRelevant certification such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or CISM.\nREQ-90\n\nWhat We Offer\nAt Volta, we believe people do their best work when they feel supported, trusted and able to grow. We're building a company where you can make an impact, keep a healthy balance between work and life, and build a career you're proud of. \nAs a global team, we do our best to provide great benefits wherever you're based. While some benefits vary by country due to local regulations, we believe looking after our people is simply the right thing to do.\nCompetitive salary based on the work you do here, not your previous salary\n\nEquity in Volta, giving you the opportunity to share in the company's long-term success\n\nRetirement/pension contributions\n\nComprehensive health, wellbeing and insurance benefits\n\nGenerous number of vacation days each year\n\nAdditional Information\nBackground Checks\nAll offers of employment at Volta are conditional on the satisfactory completion of pre-employment screening, which includes confirmation of your right to work, verification of your employment history and a criminal record check, where this is permitted by local law. Screening is carried out by Zinc, an accredited third-party provider, after an offer is made and all information is handled confidentially and in accordance with applicable data protection law.\nEqual Opportunity\nVolta is an equal opportunity employer. We are committed to building a diverse and inclusive team and make employment decisions based on skills, qualifications, experience and business needs. We do not discriminate on the basis of race, colour, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status or any other legally protected characteristic.\nAccessibility\nVolta is committed to providing an accessible recruitment experience for all candidates. If you require accommodations or adjustments at any stage of the application or interview process, please contact us at . We will work with you to identify reasonable accommodations that enable you to participate fully in the hiring process.\nCandidate Privacy Notice\nBy applying, you consent to the processing of your personal data for recruitment purposes in accordance with applicable data protection laws, including the UK GDPR, EU GDPR and relevant US state privacy regulations. Your data will be shared only with those involved in the hiring process and will not be used for unrelated purposes. For details, see our Recruitment & Candidate Privacy Notice.\nNote to Recruitment Agencies\nVolta does not accept unsolicited CVs or candidate profiles from recruitment agencies. Any unsolicited submissions, including those sent directly to hiring managers or employees, will be treated as the property of Volta. No agency fees will be payable unless a valid, signed recruitment agreement is in place, and the agency has been specifically engaged for the relevant vacancy.","description_format":"text","description_chars":9094,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Financial Services","Real Estate"],"lifecycle":[{"event":"open","at":"2026-10-07T11:41:57Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.481,"p_room":0.28,"age_days":72,"expected_fill_days":33,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/volta-security-engineer-compliance-focus","json_url":"https://alion.io/job/volta-security-engineer-compliance-focus.json","meta":{"generated_at":"2026-10-11T19:13:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5897,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3862918},"rest":"https://alion.io/mcp/rest/get_company?id=3862918"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvolta-security-engineer-compliance-focus"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvolta-security-engineer-compliance-focus"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvolta-security-engineer-compliance-focus"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/volta-security-engineer-compliance-focus\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvolta-security-engineer-compliance-focus"}]}