Security Engineer, Compliance Focus

Volta; Palo Alto (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Equity in Volta

Health, wellbeing and insurance

Retirement contributions

Generous vacation days

Job summary

Volta in Palo Alto is seeking an information security professional focused on compliance and audit readiness. You will implement controls, maintain evidence, and support audits across ISO 27001, SOC 2 Type II, and regulatory obligations.

Work with engineering to translate control requirements into actionable tasks, automate evidence collection, and prepare responses to customer security questionnaires. This role collaborates across teams and contributes to Volta’s growing security program.

Qualifications

• 3+ years in information security with a focus on compliance, GRC, or audit-facing work.
• Hands-on experience with ISO 27001 or SOC 2 programs, including evidence prep and supporting external audits.
• Knowledge of technical controls in cloud/infrastructure environments and ability to read system designs.
• Experience with GRC platforms such as Vanta/Drata and maintaining integrations, not just dashboards.
• Strong writing for evidence, procedures, and customer-facing responses.
• Organized with strong ownership and timely follow-through, collaborating with engineers.

Responsibilities

• Implement and maintain controls for ISO 27001 and SOC 2 Type II programs; track status, owners, and gaps.
• Operate the GRC platform day-to-day: configure integrations, monitor checks, resolve drift.
• Collect, organize, and quality-check evidence for auditors.
• Maintain ISMS documentation and support internal audit with needed data.
• Support risk and third-party assessments, and docent corrective actions.

Skills

Information security

Compliance

GRC

Audit experience

ISO 27001 / SOC 2

Vendor risk

Tools

Vanta

Drata

Job description

About Volta Volta is the category-defining, fully vertically integrated AI infrastructure platform – from capital to clusters to software, under a founder-led enterprise. Our mission is The Utility of Compute™: AI infrastructure as dependable and available as electricity, for every organization that needs it. Launched with a $10B strategic partnership with one of the leading frontier AI labs, a Series A led by Andreessen Horowitz, and a $5B AI Infrastructure Fund, Volta is building the infrastructure layer of the AI era from the ground up. We are 100+ people across London, Palo Alto, and New York, with rapid growth expectations to hundreds.

What You Will Be Doing

Compliance Execution

• Implement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline.
• Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls.
• Collect, organize, and quality-check evidence so that it is complete, current, and defensible when an auditor asks for it.
• Maintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions.
• Support internal audit and management review with the data and analysis they need.

Audit Support

• Prepare evidence packages and control walkthroughs ahead of audit fieldwork.
• Support auditors during fieldwork, gathering what they request and coordinating the engineers who need to answer.
• Track findings through to closure and verify that corrective actions actually took effect.

Customer and Contractual Obligation

s

• Map the security obligations in customer contracts to specific controls, and flag where we do not yet meet them.
• Draft responses to customer security questionnaires and due diligence requests for review, keeping answers consistent with what we actually do.
• Prepare material supporting lender and investor due diligence on security and compliance.

Risk and Third Parties

• Carry out risk assessments and vendor and third-party security reviews, and document the results.
• Maintain the exception register so that accepted risk stays visible, owned, and time-bound.
• Support the physical security control set at our sites and offices, working with the local contact at each location.

Regulatory

• Maintain the records and reporting needed for regulatory obligations across our footprint, including NIS2 registrations and national authority contacts, and GDPR-related documentation.

Working With Engineering

• Turn control requirements into concrete, schedulable work with platform and infrastructure teams, and follow it through to done.
• Automate evidence collection wherever possible. Anything depending on someone remembering a quarterly screenshot will eventually fail an audit.
• Support security awareness training delivery, business continuity documentation, and DR test evidence.
• Handle the compliance side of incidents: records, notification tracking, and corrective action follow-up.

What You Bring

• 3+ years in information security, with a meaningful part of it in compliance, GRC, or audit-facing work.
• Hands-on experience working within an ISO 27001 or SOC 2 program, including preparing evidence and supporting an external audit.
• Working knowledge of technical controls in a cloud or infrastructure environment. You should be able to read a system design and form a view on whether a control is real, and hold that view in a conversation with the engineer who built it.
• Experience with a GRC platform such as Vanta, Drata, or equivalent, including maintaining integrations rather than only using the dashboard.
• Practical exposure to risk assessment and documentation.
• Strong writing. Evidence, procedures, and customer-facing responses all have to be clear and hold up under scrutiny.
• Organized and persistent. Much of this role is knowing what is outstanding, whose it is, and when it is due, without needing to be reminded.
• Able to work with engineers as a partner rather than a gate. You will get more done by making the compliant path the easy one than by escalating.
• Comfortable in a company where the program is being built rather than inherited, and where the process for something often does not exist yet.

Nice To Have (But Not Essential)

• Familiarity with NIS2, or with correspondence with national authorities such as the BSI.
• Exposure to cloud, IaaS, HPC, or data center environments, and the physical security controls that come with colocation.
• Experience supporting enterprise or hyperscaler customer security reviews.
• Scripting ability in Python or similar for automating evidence collection and reporting.
• Awareness of ISO 42001 or emerging AI-specific assurance frameworks.
• Relevant certification such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or CISM.
• Fluency with AI-assisted workflows for evidence handling, questionnaire response, and documentation.

What we offer

• At Volta, we believe people do their best work when they feel supported, trusted and able to grow. We're building a company where you can make an impact, keep a healthy balance between work and life, and build a career you're proud of.
• As a global team, we do our best to provide great benefits wherever you're based. While some benefits vary by country due to local regulations, we believe looking after our people is simply the right thing to do.
• Competitive salary based on the work you do here, not your previous salary
• Equity in Volta, giving you the opportunity to share in the company's long-term success
• Retirement/pension contributions
• Comprehensive health, wellbeing and insurance benefits
• Generous number of vacation days each year

Additional Information

Equal Opportunity

Volta is an equal opportunity employer. We are committed to building a diverse and inclusive team and make employment decisions based on skills, qualifications, experience and business needs. We do not discriminate on the basis of race, colour, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status or any other legally protected characteristic.

Accessibility

Volta is committed to providing an accessible recruitment experience for all candidates. If you require accommodations or adjustments at any stage of the application or interview process, please contact us at [e-mail]. We will work with you to identify reasonable accommodations that enable you to participate fully in the hiring process.

Candidate Privacy Notice

By applying, you consent to the processing of your personal data for recruitment purposes in accordance with applicable data protection laws, including the UK GDPR, EU GDPR and relevant US state privacy regulations. Your data will be shared only with those involved in the hiring process and will not be used for unrelated purposes. For details, see our Recruitment & Candidate Privacy Notice.