AI Infrastructure Security & Compliance Lead

Nexxa.AI; Sunnyvale (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Nexxa.ai is seeking a security & compliance leader to own the company’s certifications and the security posture of our corporate and cloud environments. You will drive governance, risk assessment, and program maturity while coordinating with auditors and stakeholders to secure trust in our autonomous AI platform.

You will build scalable controls, empower teams with guardrails, and guide the evolution of our security program as we scale to broader industry deployments.

Qualifications

• Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role.
• Deep hands-on experience with security, networking, and operating systems.
• Strong scripting/automation skills (Python, Bash, Go, or similar).
• Strong writing ability: control narratives, runbooks, postmortems, audit responses, risk assessments.
• Proven judgment under ambiguity.
• CS/CE degree or equivalent hands-on experience.

Responsibilities

• Own the compliance calendar across SOC 2 Type 2 and ISO 27001 — evidence collection, access and vendor reviews, control monitoring, internal audit, management review, policy refresh, and audit readiness.
• Triage security findings across cloud posture, code scanning, dependencies, and secrets, and drive remediation to closure.
• Remediate what you triage directly in infrastructure as code, IAM policy, and pipeline configuration.
• Administer identity and access across cloud and SaaS, including SSO/federation, least-privilege roles, and the joiner/mover/leaver lifecycle.
• Support internal IT operations — endpoint fleet and device compliance, SaaS and license administration, asset inventory, support requests.
• Serve as the working interface to external auditors, our certification body, and customer security and procurement reviews.
• Build controls into infrastructure so they hold automatically, replacing manual verification with guardrails that fail closed.
• Harden CI/CD and the software supply chain — build identity, artifact provenance, dependency and secret hygiene.
• Debug production issues across cloud infrastructure, containers, and networking, and write the postmortem that keeps the fix from being forgotten.
• Produce documentation others rely on: runbooks, control narratives, architecture notes, postmortems

Skills

Security engineering

Infrastructure engineering

Scripting & automation

Audit & governance

Risk assessment

Education

CS/CE degree or equivalent hands-on experience

Tools

Terraform

Pulumi

AWS

GCP

Kubernetes

OIDC/SAML

Job description

Nexxa.ai is seeking a security & compliance leader to own the company’s certifications and the security posture of our corporate and cloud environments. You will drive governance, risk assessment, and program maturity while coordinating with auditors and stakeholders to secure trust in our autonomous AI platform.

You will build scalable controls, empower teams with guardrails, and guide the evolution of our security program as we scale to broader industry deployments.