Physical Security Policy & Contracts Manager

Nscale • London, NY

61d • Hybrid

About The Position

Nscale is seeking a Physical Security Policy & Contracts Manager to lead the company's global physical security policy framework. This role involves ensuring that contractual, audit, and compliance requirements are translated into practical, enforceable standards for all Nscale facilities and colocation sites. The position operates at the intersection of physical security, compliance, and legal governance, requiring close collaboration with site teams, Legal, and audit stakeholders. Key responsibilities include defining standards for access control, surveillance, visitor management, perimeter security, incident response, and environmental controls, as well as reviewing contractual obligations and supporting certification activities related to physical security. The goal is to establish a consistent and audit-ready security posture across Nscale's operating regions, playing a critical role in protecting the business as it scales.

Requirements

• 8+ years in physical security, compliance, or a combined role with direct ownership of policy, standards, or contract review in a data center, cloud, or critical infrastructure environment.
• Deep knowledge of data center physical security, including layered access control, CCTV, man-trap configurations, cage and suite security, and colo shared responsibility.
• Experience writing physical security policies and standards across multiple sites that are precise, consistent, and auditable.
• Strong contract review expertise with the ability to extract physical security obligations from complex commercial agreements.
• Proven ability to propose contract redlines that hold up in negotiation.
• Experience leading the physical security domain for ISO 27001 or SOC 2 processes, including controls and evidence requirements.
• Strong organizational discipline in maintaining current, complete, and usable obligation registries and evidence libraries.
• Ability to assess whether contractual requirements are operationally achievable at a specific site.

Nice To Haves

• Working knowledge of GDPR, UK GDPR, POPIA, and equivalent data protection legislation is strongly preferred.
• Experience in colo, hyperscale, or AI cloud data center environments, customer audits, or building physical security clause libraries is strongly preferred.

Responsibilities

• Own Nscale’s global physical security policy framework across access control, surveillance, visitor management, perimeter security, incident response, and environmental controls.
• Set consistent physical security standards across owned facilities and colo sites that are specific enough to audit against.
• Align policies and standards to ISO 27001, SOC 2, and NIST requirements and maintain them as those frameworks evolve.
• Translate regulatory requirements across Nscale’s operating jurisdictions into practical operational standards for site teams to implement.
• Review inbound and outbound contracts for physical security obligations, including colo agreements, customer contracts, vendor agreements, and data processing agreements.
• Identify inconsistent or impractical physical security requirements and propose precise redlines in partnership with Legal.
• Participate directly in negotiations where physical security terms are challenged or contested.
• Maintain a live registry of physical security obligations across active contracts and track compliance against them.
• Build and maintain the physical security evidence library used in customer and third-party audits.
• Own the physical security domain within ISO 27001 and SOC 2 certification processes.
• Ensure audit findings are closed out through updates to policy and standards.
• Serve as the physical security subject matter expert during customer audits.
• Assess whether contractual physical security requirements are operationally achievable at specific sites.
• Evaluate controls such as layered access control, CCTV, man-trap configurations, cage and suite security, and colo shared responsibility models.
• Advise internal stakeholders on how site realities map to contractual and framework obligations.

Benefits

• Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
• Dynamic progression plan tailored to your ambitions.
• Flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.
• Medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed