Data Center Security & Risk Assurance Lead

United States Digital Space LLC; London; On-site; NOK 1,148,000 - 1,658,000; Full time

Benefits offered by this job

Family-level Medical Insurance

Family-level Dental Insurance

Pension Contribution

Life Insurance at 4x Salary

Critical Illness Cover

Employee Assistance Programme

Tuition Reimbursement

Job summary

CoreWeave is hiring a Data Center Security Risk & Assurance Senior Program Manager to mature and execute the data center security controls program across its global footprint. You will own the audit framework, lead risk assessments, and partner with Security, Legal, and Engineering to ensure compliance with SOC 2, ISO 27001, and NIST standards while supporting EMEA site due diligence.

The role demands strategic thinking, strong cross-functional influence, and experience in high-performance

Qualifications

• 5+ years in security risk management, compliance, or assurance, ideally in cloud/hyperscale environments.
• Proven success leading risk audits and assurance programs in complex, high-growth organizations.
• Strong understanding of physical and logical security controls and regulatory frameworks.

Responsibilities

• Represent Data Center Security Operations and ensure controls align with internal standards and external regulatory frameworks.
• Plan and lead internal audits and control validations; deliver findings and track remediation.
• Collaborate with Security, Operations, Legal, and Engineering to validate security objectives and drive improvements.

Skills

Security risk management

Audit and assurance

Cross-functional collaboration

Regulatory compliance

Education

Bachelor's degree in a relevant field

Tools

SOC 2

ISO 27001

NIST CSF

ISO 22301

Job description

CoreWeave is hiring a Data Center Security Risk & Assurance Senior Program Manager to mature and execute the data center security controls program across its global footprint. You will own the audit framework, lead risk assessments, and partner with Security, Legal, and Engineering to ensure compliance with SOC 2, ISO 27001, and NIST standards while supporting EMEA site due diligence.

The role demands strategic thinking, strong cross-functional influence, and experience in high-performance