Security Engineer, Compliance Focus

The posting, as Volta wrote it

ABOUT VOLTA

Volta is the category-defining, fully vertically integrated AI infrastructure platform – from capital to clusters to software, under a founder-led enterprise. Our mission is The Utility of Compute™: AI infrastructure as dependable and available as electricity, for every organization that needs it. Launched with a $10B strategic partnership with one of the leading frontier AI labs, a Series A led by Andreessen Horowitz, and a $5B AI Infrastructure Fund, Volta is building the infrastructure layer of the AI era from the ground up. We are 100+ people across London, Palo Alto, and New York, with rapid growth expectations to hundreds.

ABOUT THE ROLE

Volta builds and operates large scale GPU compute infrastructure for frontier AI customers. Those customers hold us to real security obligations, written into contracts with dates attached, and our lenders and investors examine our security posture as part of financing. Compliance here is not a paperwork exercise at the edge of the business. It is a condition of doing business.

We are working toward ISO 27001 certification and SOC 2 Type II attestation across a company that is scaling quickly, operating multi-tenant infrastructure in several countries, and deploying into partner data centers. The Senior Manager, Cyber Security Engineering owns that program, its scope, and its direction. You are the engineer who makes it work in practice: implementing and evidencing controls, keeping the GRC platform accurate, preparing what auditors and customers ask for, and chasing the details that decide whether an audit goes well.

This is a compliance role on an engineering team. You will spend as much time with platform and infrastructure engineers as with documents, and you will need to be able to tell whether a control is actually working or only described.

WHAT YOU WILL BE DOING

Compliance Execution

• Implement and maintain the control set defined for our ISO 27001 and SOC 2 Type II programs, tracking status, owners, and gaps against the certification timeline.
• Operate our GRC platform (Vanta) day to day: configure and maintain integrations, monitor automated control checks, and resolve drift and failing controls.
• Collect, organize, and quality-check evidence so that it is complete, current, and defensible when an auditor asks for it.
• Maintain ISMS documentation to the standard the Senior Manager sets: policies and procedures, the risk register, and records of corrective actions.
• Support internal audit and management review with the data and analysis they need.

Audit Support

• Prepare evidence packages and control walkthroughs ahead of audit fieldwork.
• Support auditors during fieldwork, gathering what they request and coordinating the engineers who need to answer.
• Track findings through to closure and verify that corrective actions actually took effect.

Customer and Contractual Obligations

• Map the security obligations in customer contracts to specific

[…]
screening, which includes confirmation of your right to work, verification of your employment history and a criminal record check, where this is permitted by local law. Screening is carried out by Zinc, an accredited third-party provider, after an offer is made and all information is handled confidentially and in accordance with applicable data protection law.

EQUAL OPPORTUNITY

Volta is an equal opportunity employer. We are committed to building a diverse and inclusive team and make employment decisions based on skills, qualifications, experience and business needs. We do not discriminate on the basis of race, colour, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status or any other legally protected characteristic.

ACCESSIBILITY

Volta is committed to providing an accessible recruitment experience for all candidates. If you require accommodations or adjustments at any stage of the application or interview process, please contact us at askpeople@volta.com. We will work with you to identify reasonable accommodations that enable you to participate fully in the hiring process.

CANDIDATE PRIVACY NOTICE

By applying, you consent to the processing of your personal data for recruitment purposes in accordance with applicable data protection laws, including the UK GDPR, EU GDPR and relevant US state privacy regulations. Your data will be shared only with those involved in the hiring process and will not be used for unrelated purposes. For details, see our Recruitment & Candidate Privacy Notice.

NOTE TO RECRUITMENT AGENCIES

Volta does not accept unsolicited CVs or candidate profiles from recruitment agencies. Any unsolicited submissions, including those sent directly to hiring managers or employees, will be treated as the property of Volta. No agency fees will be payable unless a valid, signed recruitment agreement is in place, and the agency has been specifically engaged for the relevant vacancy.