Director of Security and Compliance

Scale Computing • Austin, TX

1d • Onsite

About The Position

Scale Computing is hiring a Director of Security and Compliance to own the company’s security and compliance program end to end. This leader sets objectives for the Compliance and Security Operations function, owns security risk on behalf of the executive team, and is accountable for the company’s PCI-DSS, SOC 2, and ISO 27001 posture, both for Scale Computing and for managed-compliance services delivered to customers.

This is a full-time, in-office role based in Scale Computing’s Austin, Texas office. The position leads security and compliance strategy, risk management, incident readiness, customer assurance, AI governance, and development of the function’s leadership bench.

Requirements

• 10+ years of experience in information security, including 5+ years leading security or compliance teams.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Demonstrated knowledge of PCI-DSS, SOC 2, or ISO 27001.
• Demonstrated risk-management practice, including maintaining a risk register, making and documenting treatment decisions, and presenting risk to executives.
• Incident-response leadership experience, including serving as the accountable lead during a material security incident.
• Working use of AI tooling in a leadership context and a defensible position on its risks.
• People-leadership fundamentals, including development planning, performance management, hiring, and mentorship of managers.
• Executive presence and clear written and verbal communication with technical teams, executives, customers, and auditors.

Nice To Haves

• Privacy program experience, such as GDPR, CCPA, or equivalent, and contract negotiation of security and data-protection terms.
• Familiarity with edge, retail, or distributed-site environments and the security challenges of large remote fleets.
• Experience with additional frameworks such as NIST CSF, CIS Controls, or FedRAMP.
• CISSP, CISM, CRISC, or PCI ISA certification.

Responsibilities

• Own the security and compliance strategy and set annual and quarterly objectives for the Compliance and Security Operations team.
• Own the PCI-DSS, SOC 2, and ISO 27001 compliance program across Scale Computing and managed-compliance customers, including scope definition, control frameworks, auditor and QSA relationships, audit outcomes, and remediation accountability.
• Define the shared-responsibility model with managed-service customers and ensure contracts, statements of work, and customer-facing compliance artifacts accurately reflect it.
• Own the enterprise security risk register, including identification, rating, treatment decisions, and risk acceptance escalated to the executive team.
• Own security policies, standards, and the exception process, ensuring policies reflect actual company operations.
• Own incident-response readiness and serve as the accountable executive during security incidents, including customer, regulatory, and legal notification decisions in partnership with Legal.
• Own third-party and vendor risk management, including security reviews of new vendors, SaaS tools, and acquisitions.
• Own customer security assurance, including security questionnaires, trust documentation, and security participation in sales cycles and customer audits.
• Own AI governance for security and compliance, including acceptable-use policy, data-handling boundaries, and risk assessment of AI tools and AI-enabled product features.
• Report security and compliance posture to the executive team and board using tooling-generated measures, including control health, risk trends, remediation aging, audit status, and SLA attainment.
• Develop the security and compliance leadership bench, maintaining documented development plans for direct reports and a succession plan for the function.

Benefits

• Medical, dental, and vision insurance.
• Company-paid life insurance, short-term disability, and long-term disability.
• Flexible Spending Accounts, additional life and AD&D coverage, critical illness and hospital indemnity coverage, legal insurance, and pet insurance.
• 401(k) plan.
• Employee-directed Paid Time Off with no fixed annual allotment.
• 10 paid company holidays.
• Paid parental leave for births, adoptions, and foster placements.
• Volunteer Time Off.

What This Job Offers

• Job Type: Full-time
• Career Level: Director