Physical Security Policy & Contracts Manager

Nscale•Seattle, WA

58d•$150,000 - $200,000•Hybrid

About The Position

We’re hiring a Physical Security Policy & Contracts Manager to own Nscale’s global physical security policy framework and ensure contractual, audit, and compliance requirements translate into practical, enforceable standards across our facilities and colo sites. This role sits at the intersection of physical security, compliance, and legal governance, connecting closely with site teams, Legal, and audit stakeholders. You’ll define standards across areas such as access control, surveillance, visitor management, perimeter security, incident response, and environmental controls, while also reviewing contractual obligations and supporting certification activity tied to physical security. Your work will help create a consistent, audit-ready security posture across Nscale’s operating regions. By building policies that hold up under audit, maintaining a clear view of contractual obligations, and serving as a subject matter expert during customer and third-party audits, you’ll play a critical role in protecting the business as it scales.

Requirements

8+ years in physical security, compliance, or a combined role with direct ownership of policy, standards, or contract review in a data center, cloud, or critical infrastructure environment
Deep knowledge of data center physical security, including layered access control, CCTV, man-trap configurations, cage and suite security, and colo shared responsibility
Experience writing physical security policies and standards across multiple sites that are precise, consistent, and auditable
Strong contract review expertise with the ability to extract physical security obligations from complex commercial agreements
Proven ability to propose contract redlines that hold up in negotiation
Experience leading the physical security domain for ISO 27001 or SOC 2 processes, including controls and evidence requirements
Strong organizational discipline in maintaining current, complete, and usable obligation registries and evidence libraries
Ability to assess whether contractual requirements are operationally achievable at a specific site

Nice To Haves

Working knowledge of GDPR, UK GDPR, POPIA, and equivalent data protection legislation is strongly preferred
Experience in colo, hyperscale, or AI cloud data center environments, customer audits, or building physical security clause libraries is strongly preferred

Responsibilities

Own Nscale’s global physical security policy framework across access control, surveillance, visitor management, perimeter security, incident response, and environmental controls
Set consistent physical security standards across owned facilities and colo sites that are specific enough to audit against
Align policies and standards to ISO 27001, SOC 2, and NIST requirements and maintain them as those frameworks evolve
Translate regulatory requirements across Nscale’s operating jurisdictions into practical operational standards for site teams to implement
Review inbound and outbound contracts for physical security obligations, including colo agreements, customer contracts, vendor agreements, and data processing agreements
Identify inconsistent or impractical physical security requirements and propose precise redlines in partnership with Legal
Participate directly in negotiations where physical security terms are challenged or contested
Maintain a live registry of physical security obligations across active contracts and track compliance against them
Build and maintain the physical security evidence library used in customer and third-party audits
Own the physical security domain within ISO 27001 and SOC 2 certification processes
Ensure audit findings are closed out through updates to policy and standards
Serve as the physical security subject matter expert during customer audits
Assess whether contractual physical security requirements are operationally achievable at specific sites
Evaluate controls such as layered access control, CCTV, man-trap configurations, cage and suite security, and colo shared responsibility models
Advise internal stakeholders on how site realities map to contractual and framework obligations