Scale Computing is the leader in edge computing, virtualization, and hyperconverged solutions for customers around the globe. The company transforms the way businesses use infrastructure technology through the delivery of innovative products and services, with a philosophy of innovation and employee empowerment driving its commitment to best-in-class customer experiences, partner success, and shareholder return. Employees, known internally as "Scalers," operate by five core values: Vigilant, Owner, Integrity, Champion, and Empower.
About the Role
Scale Computing is hiring a Director of Security and Compliance to own the companys security and compliance program end to end. This leader sets the objectives for the Compliance and Security Operations function, owns security risk on behalf of the executive team, and is accountable for the companys PCI-DSS (Payment Card Industry Data Security Standard), SOC 2 (System and Organization Controls 2), and ISO 27001 posture, both for Scale Computing and for the managed-compliance services delivered to customers.
This is a full-time in-office role based in our Austin, TX office.
What Youll Do
- Own the security and compliance strategy, and set the annual and quarterly objectives the Compliance and Security Operations team executes against.
- Own the compliance program for PCI-DSS, SOC 2, and ISO 27001 across Scale Computing and managed-compliance customers: scope definition, control framework, auditor and QSA (Qualified Security Assessor) relationships, audit outcomes, and remediation accountability.
- Define the shared-responsibility model between Scale Computing and its managed-service customers, and ensure contracts, statements of work, and customer-facing compliance artifacts accurately reflect it.
- Own the enterprise security risk register: identification, rating, treatment decisions, and risk acceptance escalated to the executive team.
- Own security policy, standards, and the exception process, and ensure policies match how the company actually operates.
- Own incident response readiness and serve as the accountable executive during security incidents, including customer, regulatory, and legal notification decisions in partnership with Legal.
- Own third-party and vendor risk management, including security review of new vendors, SaaS (software-as-a-service) tools, and acquisitions.
- Own customer security assurance: security questionnaires, trust documentation, and security participation in sales cycles and customer audits.
- Own AI governance for security and compliance: acceptable-use policy, data-handling boundaries, and risk assessment of AI tools and AI-enabled product features.
- Report security and compliance posture to the executive team and board using measures produced from the tooling (control health, risk trend, remediation aging, audit status, SLA attainment) rather than narrative status.
- Develop the security and compliance leadership bench, maintaining a documented development plan for direct reports and a succession plan for the function.