Senior Security Assurance Lead (SOC 2 / ISO 27001)

Nscale; Oregon; Hybride; USD 140 000 - 180 000; Plein temps

Avantages offerts par ce poste

Competitive compensation

Equity

Flexible work options

Résumé du poste

Nscale is seeking a Senior Audit Program Manager, Security Assurance to lead security audits and certification programs as its global AI infrastructure scales. This role reports to the Director, Security Risk & Compliance and manages SOC 2 and ISO 27001 engagements across cloud services, data centers, and corporate functions.

You will own engagements and workstreams, ensuring evidence quality, control narratives, and timely remediation.

Qualifications

• 7+ years of security assurance, technology audit, or related discipline with external audit leadership.
• Hands-on experience with SOC 2 and ISO 27001 and delivering audits to final reports.
• Experience working with external auditors, leading walkthroughs, and managing findings to closure.
• Technical fluency in cloud infrastructure and security controls; ability to discuss controls with engineers.
• Experience defining assessment scope and understanding shared responsibilities across teams and providers.
• Strong program execution for concurrent engagements with dependency management and escalation.

Responsabilités

• Lead SOC 2 and ISO 27001 engagements, including readiness assessments, scope expansions, ongoing assessments, and remediation.
• Establish audit plans with clear boundaries, control owners, evidence requirements, milestones, and dependencies. Coordinate observation periods, fieldwork, and report or certificate delivery with external auditors.
• Serve as the primary auditor contact for your engagements. Lead control walkthroughs, prepare technical teams for interviews, and resolve evidence requests and interpretation questions.
• Manage audit requests, schedules, and status reviews across concurrent engagements. Assign owners, set deadlines, review submissions, document decisions, and drive follow-through on blockers and recovery plans.
• Prepare audit documentation, including application letters, scoping questionnaires, evidence request lists, and management responses. Review draft reports and certification documents for factual accuracy, scope, and consistency with evidence, and coordinate approvals and signatures.
• Maintain an organized, version-controlled record of evidence, correspondence, approvals, and final deliverables. Surface delivery risks early with practical recommendations.
• Partner with Compliance Automation to define evidence requirements, identify reliable source systems, and validate automated collection and monitoring outputs.
• Build reusable evidence and control mappings that reduce repeated requests while preserving each assessment's scope and period requirements.
• Improve audit workflows in Drata and connected delivery tools so owners, evidence, findings, and decisions remain traceable.
• Use AI tools to streamline repeatable assurance work, with appropriate data handling and verification of generated outputs.

Connaissances

Security assurance

SOC 2

ISO 27001

External auditors

Cloud security

Program management

Leadership

Cross-functional collaboration

Outils

Drata

GRC platforms

SQL

APIs

Description du poste

Nscale is seeking a Senior Audit Program Manager, Security Assurance to lead security audits and certification programs as its global AI infrastructure scales. This role reports to the Director, Security Risk & Compliance and manages SOC 2 and ISO 27001 engagements across cloud services, data centers, and corporate functions.

You will own engagements and workstreams, ensuring evidence quality, control narratives, and timely remediation.