Director of Security and Compliance

Acumera is now Scale Computing!; Austin (TX); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid life insurance, short- &/

Long-term disability

Flexible Spending Accounts

401(k) plan

Paid Time Off + 10 holidays

Paid parental leave

Volunteer Time Off

Job summary

Scale Computing seeks a Director of Security and Compliance to own the company’s security and compliance program end to end. This leader sets objectives for PCI-DSS, SOC 2, and ISO 27001 posture across Scale Computing and managed‑compliance customers.

This full‑time, in‑office role based in Austin, TX, drives enterprise security risk management, policy and exception programs, incident response readiness, vendor risk, and AI governance, partnering with Legal and executives to protect customers

Qualifications

• 10+ years in information security, including 5+ years leading security or compliance teams.
• Demonstrated knowledge of PCI-DSS, SOC 2, or ISO 27001.
• Demonstrated risk management practice: maintaining a risk register, making and documenting treatment decisions.
• Incident response leadership, including experience as the accountable lead during a material security incident.
• Working use of AI tooling in a leadership context, and a defensible position on its risks.
• People-leadership fundamentals: development planning, performance management, hiring, and mentorship of managers.
• Executive presence and clear written and verbal communication with technical teams, executives, customers, and auditors.

Responsibilities

• Own the security and compliance strategy, and set the annual and quarterly objectives the team executes against.
• Own PCI-DSS, SOC 2, and ISO 27001 programs for Scale Computing and managed-compliance customers: scope, controls, audits, remediation.
• Define the shared-responsibility model with customers and ensure contracts reflect it.
• Maintain enterprise security risk register: identification, rating, decisions, escalation.
• Own security policy, standards, and exception process; ensure alignment with operations.
• Lead incident response readiness and act as executive during incidents with Legal for notifications.
• Oversee third-party and vendor risk management, including security reviews of vendors, SaaS tools, and acquisitions.
• Manage customer security assurance: security questionnaires, trust documents, and sales cycle security in audits.
• Oversee AI governance for security and compliance: acceptable-use policy and data handling boundaries.
• Report posture to executives and board via metrics: control health, risk trends, remediation aging, audit status, SLA attainment.
• Develop leadership bench and succession plans for the function.

Skills

Security leadership

Risk management

Incident response

Executive communication

AI governance

People leadership

Security strategy

Education

Bachelor's degree in Cybersecurity / IT / CS or related field

Tools

PCI-DSS

SOC 2

ISO 27001

NIST CSF

CIS Controls

FedRAMP

GDPR/CCPA knowledge

Certifications: CISSP/CISM/CRISC/ISA

Job description

Description

Scale Computing is the leader in edge computing, virtualization, and hyperconverged solutions for customers around the globe. The company transforms the way businesses use infrastructure technology through the delivery of innovative products and services, with a philosophy of innovation and employee empowerment driving its commitment to best‑in‑class customer experiences, partner success, and shareholder return. Employees, known internally as "Scalers," operate by five core values: Vigilant, Owner, Integrity, Champion, and Empower.

Apply

Scale Computing is the leader in edge computing, virtualization, and hyperconverged solutions for customers around the globe. The company transforms the way businesses use infrastructure technology through the delivery of innovative products and services, with a philosophy of innovation and employee empowerment driving its commitment to best‑in‑class customer experiences, partner success, and shareholder return. Employees, known internally as "Scalers," operate by five core values: Vigilant, Owner, Integrity, Champion, and Empower.

About The Role

Scale Computing is hiring a Director of Security and Compliance to own the company's security and compliance program end to end. This leader sets the objectives for the Compliance and Security Operations function, owns security risk on behalf of the executive team, and is accountable for the company's PCI‑DSS (Payment Card Industry Data Security Standard), SOC 2 (System and Organization Controls 2), and ISO 27001 posture, both for Scale Computing and for the managed‑compliance services delivered to customers.

This is a full-time in-office role based in our Austin, TX office.

What You’ll Do

• Own the security and compliance strategy, and set the annual and quarterly objectives the Compliance and Security Operations team executes against.
• Own the compliance program for PCI‑DSS, SOC 2, and ISO 27001 across Scale Computing and managed‑compliance customers: scope definition, control framework, auditor and QSA (Qualified Security Assessor) relationships, audit outcomes, and remediation accountability.
• Define the shared‑responsibility model between Scale Computing and its managed‑service customers, and ensure contracts, statements of work, and customer‑facing compliance artifacts accurately reflect it.
• Own the enterprise security risk register: identification, rating, treatment decisions, and risk acceptance escalated to the executive team.
• Own security policy, standards, and the exception process, and ensure policies match how the company actually operates.
• Own incident response readiness and serve as the accountable executive during security incidents, including customer, regulatory, and legal notification decisions in partnership with Legal.
• Own third‑party and vendor risk management, including security review of new vendors, SaaS (software‑as‑a‑service) tools, and acquisitions.
• Own customer security assurance: security questionnaires, trust documentation, and security participation in sales cycles and customer audits.
• Own AI governance for security and compliance: acceptable‑use policy, data‑handling boundaries, and risk assessment of AI tools and AI‑enabled product features.
• Report security and compliance posture to the executive team and board using measures produced from the tooling (control health, risk trend, remediation aging, audit status, SLA attainment) rather than narrative status.
• Develop the security and compliance leadership bench, maintaining a documented development plan for direct reports and a succession plan for the function.

Requirements

• 10+ years in information security, including 5+ years leading security or compliance teams; Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Demonstrated knowledge of PCI‑DSS, SOC 2, or ISO 27001.
• Demonstrated risk management practice: maintaining a risk register, making and documenting treatment decisions, and presenting risk to executives.
• Incident response leadership, including experience as the accountable lead during a material security incident.
• Working use of AI tooling in a leadership context, and a defensible position on its risks.
• People‑leadership fundamentals: development planning, performance management, hiring, and mentorship of managers.
• Executive presence and clear written and verbal communication with technical teams, executives, customers, and auditors.

Nice to Have

• Privacy program experience (GDPR (General Data Privacy Regulation), CCPA (California Consumer Privacy Act), or equivalent) and contract negotiation of security and data‑protection terms.
• Familiarity with edge, retail, or distributed‑site environments and the security challenges of large remote fleets.
• Experience with additional frameworks such as NIST CSF (National Institute of Standards and Technology Cybersecurity Framework), CIS Controls, or FedRAMP.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), or PCI ISA (Internal Security Assessor).

Benefits

Scale Computing offers a comprehensive benefits package, effective the first of the month following your date of hire:

• Medical, dental, and vision insurance
• Company‑paid life insurance, short‑term disability, and long‑term disability
• Flexible Spending Accounts, additional life/AD&D coverage, critical illness and hospital indemnity, legal insurance, and pet insurance
• 401(k) plan
• Employee‑directed Paid Time Off (no fixed annual allotment) plus 10 paid company holidays
• Paid parental leave for births, adoptions, and foster placements
• Volunteer Time Off (VTO)

Equal Opportunity Employer

Scale Computing is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other status protected by applicable law.