Data Center Security Risk & Assurance Lead

Coreweaveu; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Family-level Medical Insurance

Family-level Dental Insurance

Generous Pension Contribution

Life Assurance at 4x Salary

Critical Illness Cover

Employee Assistance Programme

Tuition Reimbursement

Work culture focused on innovative dis

Job summary

CoreWeave is seeking a Data Center Security Risk & Assurance Senior Program Manager to mature and run the data center security audit framework globally, including EMEA. You will lead audits, validate controls, and work with Legal, Engineering, and Operations to meet regulatory and contract requirements.

You will shape risk assessments, manage remediation findings, and align security programs with SOC 2, ISO 27001 and other standards, while supporting site selection and due diligence.

Qualifications

• 5+ years of experience in security risk management, compliance, or assurance functions.
• Proven success leading risk audits and assurance programs in complex, high-growth organizations.
• Strong understanding of physical and logical security controls, risk frameworks (NIST CSF, ISO 27001, ISO27037, ISO22301, SOC 2, HITrust, FedRAMP).
• Demonstrated ability to translate technical security concepts into actionable business insights and governance structures.
• Excellent communication, influencing, and cross-functional collaboration skills.

Responsibilities

• Represent CoreWeave’s Data Center Security Operations team, ensuring DC Security controls align with internal standards and external regulatory frameworks.
• Plan and lead independent internal audits and control validations across CoreWeave’s data center network.
• Partner with Operations, Security Design, Security Operations, and PM teams to verify security controls are implemented and effective.
• Conduct physical security due diligence for site selection and ensure security requirements are included in contracts.
• Inform and collaborate with Security Design and Operations to communicate site security requirements.
• Ensure assessments and audit evidence are reported to track control health and risk trends.
• Build strong relationships to foster accountability and proactive risk management.

Skills

Security risk management

Compliance

Audit governance

Cross-functional collaboration

Communication

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor

Job description

CoreWeave is seeking a Data Center Security Risk & Assurance Senior Program Manager to mature and run the data center security audit framework globally, including EMEA. You will lead audits, validate controls, and work with Legal, Engineering, and Operations to meet regulatory and contract requirements.

You will shape risk assessments, manage remediation findings, and align security programs with SOC 2, ISO 27001 and other standards, while supporting site selection and due diligence.