Director, Legal (Cybersecurity)

Location: U.S.-based; New York or San Francisco

Salary: $210,000–$340,000 USD base salary per year, with potential bonus, equity, and/or commission programs.

Company

Nscale provides high-performance GPU cloud infrastructure for AI start-ups and enterprise customers, supporting AI development, cost management, innovation, and environmental responsibility.

What you will do

• Serve as the primary legal partner to the CISO and Security organization on security programs, controls, risk decisions, and governance.
• Lead legal strategy for security incidents, privileged investigations, breach notifications, regulator engagement, and law-enforcement coordination.
• Advise Finance, Securities counsel, and Investor Relations on SEC cybersecurity disclosures, materiality assessments, Form 8-K reporting, and 10-K governance disclosures.
• Build and manage the cybersecurity legal and regulatory compliance program across the U.S., supporting execution in the UK, EU, and other regions.
• Advise on security requirements, critical infrastructure, data centers, security certifications, customer and supplier contracts, cyber insurance, and supply-chain risk.
• Partner with Privacy & AI, engineering, procurement, commercial legal, and executives on AI security, data protection, vulnerability disclosure, training, and security-by-design.

Requirements

• U.S.-qualified attorney with 10+ years of experience, including significant in-house cybersecurity or security counsel experience.
• Experience leading legal responses to significant security incidents, including privileged investigations, notifications, and regulator engagement.
• Working knowledge of SEC cybersecurity disclosure requirements and public-company governance.
• Strong familiarity with U.S. federal and state cybersecurity and data-security laws, NIS2, DORA, and UK and EU GDPR security obligations.
• Ability to understand technical security controls, translate risk into business decisions, and partner effectively with CISOs, engineers, executives, and the Board.
• Calm judgment, discretion, strong communication skills, and the ability to operate independently in a fast-paced, ambiguous environment.

Nice to have

• Experience with critical infrastructure, data centers, public-sector security, FedRAMP, CMMC, or DFARS.
• Certifications such as CIPP/US, CISSP, or equivalent.
• Pre- or post-IPO company experience.
• Familiarity with AI and model security issues.
• Litigation or investigations experience.

Culture & Benefits

• Culture centered on innovation, ownership, accountability, openness, and transparency.
• Medical, dental, and vision coverage.
• Flexible paid time off and parental leave.
• Retirement plan participation.
• Potential eligibility for bonus, equity, and/or commission programs.