Director of Security and Compliance

Scale Computing INC • Austin, TX

1d • Onsite

About The Position

Scale Computing is hiring a Director of Security and Compliance to own the company’s security and compliance program end to end. This leader sets objectives for the Compliance and Security Operations function, owns security risk on behalf of the executive team, and is accountable for the company’s PCI-DSS, SOC 2, and ISO 27001 posture, both for Scale Computing and for managed-compliance services delivered to customers.

This is a full-time, in-office role based in Scale Computing’s Austin, Texas office.

Requirements

• 10+ years of experience in information security, including 5+ years leading security or compliance teams.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Demonstrated knowledge of PCI-DSS, SOC 2, or ISO 27001.
• Demonstrated risk-management practice, including maintaining a risk register, making and documenting treatment decisions, and presenting risk to executives.
• Incident-response leadership experience, including serving as the accountable lead during a material security incident.
• Working use of AI tooling in a leadership context and a defensible position on its risks.
• People-leadership fundamentals, including development planning, performance management, hiring, and mentorship of managers.
• Executive presence and clear written and verbal communication with technical teams, executives, customers, and auditors.

Nice To Haves

• Privacy program experience, such as GDPR, CCPA, or equivalent, and contract negotiation of security and data-protection terms.
• Familiarity with edge, retail, or distributed-site environments and the security challenges of large remote fleets.
• Experience with additional frameworks such as NIST CSF, CIS Controls, or FedRAMP.
• CISSP, CISM, CRISC, or PCI ISA certification.

Responsibilities

• Own the security and compliance strategy and set annual and quarterly objectives for the Compliance and Security Operations team.
• Own the PCI-DSS, SOC 2, and ISO 27001 compliance programs across Scale Computing and managed-compliance customers, including scope definition, control frameworks, auditor and QSA relationships, audit outcomes, and remediation accountability.
• Define the shared-responsibility model between Scale Computing and managed-service customers, ensuring contracts, statements of work, and customer-facing compliance artifacts accurately reflect it.
• Own the enterprise security risk register, including identification, rating, treatment decisions, and risk acceptance escalated to the executive team.
• Own security policies, standards, and the exception process, ensuring policies reflect actual company operations.
• Own incident response readiness and serve as the accountable executive during security incidents, including customer, regulatory, and legal notification decisions in partnership with Legal.
• Own third-party and vendor risk management, including security reviews of new vendors, SaaS tools, and acquisitions.
• Own customer security assurance, including security questionnaires, trust documentation, and security participation in sales cycles and customer audits.
• Own AI governance for security and compliance, including acceptable-use policy, data-handling boundaries, and risk assessment of AI tools and AI-enabled product features.
• Report security and compliance posture to the executive team and board using measures from tooling, including control health, risk trends, remediation aging, audit status, and SLA attainment.
• Develop the security and compliance leadership bench by maintaining documented development plans for direct reports and a succession plan for the function.

Benefits

• Medical, dental, and vision insurance.
• Company-paid life insurance, short-term disability, and long-term disability.
• Flexible Spending Accounts, additional life/AD&D coverage, critical illness and hospital indemnity, legal insurance, and pet insurance.
• 401(k) plan.
• Employee-directed Paid Time Off with no fixed annual allotment, plus 10 paid company holidays.
• Paid parental leave for births, adoptions, and foster placements.
• Volunteer Time Off (VTO).

What This Job Offers

• Job Type: Full-time
• Career Level: Director