Senior Audit Program Manager, Security Assurance

Location: Houston, New York, San Francisco, or Seattle, United States

Salary: $140,000–$180,000 USD base salary per year, plus potential bonus, equity, and/or commission.

Company

Nscale provides GPU cloud infrastructure for AI startups and enterprise customers, focusing on high-performance, cost-effective AI computing.

What you will do

• Lead SOC 2 and ISO 27001 engagements from readiness and scoping through external assessment, remediation, and final reporting.
• Develop audit plans, coordinate control owners and evidence requirements, manage milestones, and serve as the primary contact for external auditors.
• Assess technical controls and evidence across cloud infrastructure, identity and access management, change management, logging, vulnerability management, backup and recovery, and physical security.
• Manage scope expansions across services, sites, entities, and operating models, including shared and inherited controls from cloud and colocation providers.
• Turn audit findings into remediation plans, verify corrective evidence, and coordinate retesting and auditor acceptance.
• Improve assurance workflows through reusable evidence, control mappings, Drata, automation, and AI tools.

Requirements

• 7+ years of experience in security assurance, technology audit, compliance, or a related discipline.
• Hands-on experience independently leading external SOC 2 and ISO 27001 audits or certification engagements through final outcomes.
• Experience working with external auditors, leading control walkthroughs, resolving evidence questions, and managing findings through verified closure.
• Technical fluency in cloud infrastructure and security controls, with the ability to assess control design, operation, and supporting evidence.
• Experience defining assessment scope and managing shared responsibilities across internal teams, cloud providers, and other service providers.
• Strong program execution, investigation, prioritization, written communication, and escalation skills across concurrent engagements.

Nice to have

• Security assurance experience with a cloud service provider, hyperscaler, infrastructure platform, or data center operator.
• Experience with Drata or a comparable GRC platform, continuous monitoring, evidence reuse, and audit scope expansion.
• Prior experience as an external technology auditor or ISO 27001 auditor.
• CISA, CISSP, ISO 27001 Lead Auditor, or equivalent practical expertise.
• Experience with SQL, scripting, APIs, GPU infrastructure, Kubernetes, or infrastructure as code.

Culture & Benefits

• Collaborative, supportive, and innovative working environment.
• Flexible workplace with autonomy over daily scheduling.
• Performance reviews every 12 months and a progression plan aligned with professional ambitions.
• Potential medical, dental, vision, flexible paid time off, parental leave, and retirement plan benefits.
• Compensation may include base salary, bonus, equity, and/or commission.