{"schemaVersion":"jobsearcher.job.v1","id":"981ab65ac6963293e71e5e5f","url":"https://jobsearcher.com/jobs/981ab65ac6963293e71e5e5f","canonicalUrl":"https://jobsearcher.com/jobs/981ab65ac6963293e71e5e5f","title":"Security Program Manager","description":"Build the GPU cloud that AI teams actually want to use.Think it. Build it. Ship it.\r\nWe own and run our own NVIDIA infrastructure, so the people who build here work close to the hardware and close to the customer. That is the promise we make to customers, and it is how the work happens here.\r\nSecurity Program ManagerLocationRemote - United States\r\nEmployment TypeFull time\r\nLocation TypeRemote\r\nAbout Massed ComputeMassed Compute is building a modern GPU cloud platform for AI and high-performance compute workloads. Customers choose us when they need high-performance infrastructure with more flexibility, visibility, and support than they get from traditional options. Our work sits at the intersection of AI infrastructure, product design, systems thinking, and customer obsession.\r\nThis job involves owning the security program day-to-day, pursuing and obtaining ISO 27001 certification and leading FedRAMP readiness efforts.\r\nThis is a hands-on GRC seat. You run the queue: controls, evidence, auditors, vendors, questionnaires, and abuse. Engineering still patches systems. You make sure the evidence is real and the auditor has a named owner.\r\nWe will train you on the tools (Vanta), vendor reviews, and SOC 2 audits. You need good judgment, follow-through, and clear writing.What you will doOwn GRC Tool (Vanta): failing controls, evidence, and following up with the people who actually fix things\r\nBe the primary contact for our SOC 2 auditor and the ISO 27001 certification body\r\nMaintain SOC 2 Type II compliance through audits (PBC lists, walkthroughs, findings response)\r\nRun vendor security reviews on a weekly cadence\r\nAnswer customer security questionnaires; stand up and maintain a current Trust Center\r\nOwn abuse / acceptable-use intake and enforcement process\r\nOwn spam reporting and email blocking\r\nKeep HIPAA, GDPR, and EU AI Act documents accurate\r\nFinish our ISO 27001 ISMS package: procedures, Statement of Applicability, internal audit, management review\r\nBuild a FedRAMP readiness folder (inventory, authorization boundary, control map from SOC 2/ISO to NIST 800-53). We start a 3PAO only if a named federal deal requires it\r\nUse AI to draft, research, and speed up routine GRC work; verify accuracy before any output is treated as auditable proof\r\nOwn employee security onboarding and offboarding (accounts and access, Vanta tasks, MDM, background-check evidence, timely leaver cutoff)What you needYou write clearly. This job is evidence, auditor email, and customer questionnaires\r\nYou can own a queue: pick up work, follow up professionally, close the loop, and see items through to completion\r\nYou work AI-first: you use automation to move faster, and you personally review the output before it becomes audit evidence or customer-facing material\r\nYou are willing to be the named contact for auditors and customers once trained\r\nBackground in security, compliance, IT, operations, or similar process work helps. Direct SOC 2 / Vanta / vendor-review experience is not required.Nice to haveSOC 2, ISO 27001, HIPAA, or GDPR exposure in any role\r\nVanta, Drata, Secureframe, Sprinto, or another GRC tool\r\nVendor security reviews or customer security questionnaires\r\nPolicies or procedures you wrote that someone else actually used\r\nNIST 800-53 or FedRAMP as a contributor\r\nCloud, IaaS, GPU cloud, or colocation familiarity\r\nTrust-and-safety, AUP, or abuse handling\r\nWe are a lean, ambitious team operating in one of the most important technology markets in the world. If you want ownership, pace, and the opportunity to do career-defining work alongside practical, high-agency teammates, MassedCompute is a great place to build.\r\nMarket competitive compensation\r\nWe are a remote-first company. You’ll get a stipend to dial in your setup and additional opportunities to connect with your peers during periodic in person team gatherings\r\nFlexible PTO policy with the expectation that you take the time you need to recharge\r\n100% coverage of medical, dental, and vision insurance for employees, 30% of premiums for dependents, plus a tax-advantaged Flexible Spending Account\r\nCompany-facilitated 401(k) retirement plan\r\nParental leave for all new parents\r\nWork AuthorizationApplicants must be legally authorized to work in the United States and obtain security clearance. We are unable to sponsor work visas for this position.\r\nMassed Compute is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by law.\r\nWhy the work mattersAI teams need compute today, and we give it to them.Most GPU providers ask for a long contract, a support queue, and a bill that takes a spreadsheet to understand. We built the friendlier option. On demand GPUs by the hour, bare metal for production workloads, and full clusters for serious training runs, all on hardware we own and run ourselves.\r\nReal infrastructureWe are an NVIDIA Preferred Partner running current data center GPUs in Tier III facilities, with SOC 2, GDPR, and HIPAA compliance behind the platform.\r\nReal customersResearchers, studios, startups, and enterprise teams run production work on Massed Compute every day. What you build reaches them the week you ship it.#J-18808-Ljbffr","company":"Massed Compute","rawCompany":"massed compute","city":"Brooklyn","state":"NY","isRemote":false,"isActive":false,"createdAt":"2026-10-10T01:32:59.093Z","occupations":[{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Program Manager","description":"Build the GPU cloud that AI teams actually want to use.Think it. Build it. Ship it.\r\nWe own and run our own NVIDIA infrastructure, so the people who build here work close to the hardware and close to the customer. That is the promise we make to customers, and it is how the work happens here.\r\nSecurity Program ManagerLocationRemote - United States\r\nEmployment TypeFull time\r\nLocation TypeRemote\r\nAbout Massed ComputeMassed Compute is building a modern GPU cloud platform for AI and high-performance compute workloads. Customers choose us when they need high-performance infrastructure with more flexibility, visibility, and support than they get from traditional options. Our work sits at the intersection of AI infrastructure, product design, systems thinking, and customer obsession.\r\nThis job involves owning the security program day-to-day, pursuing and obtaining ISO 27001 certification and leading FedRAMP readiness efforts.\r\nThis is a hands-on GRC seat. You run the queue: controls, evidence, auditors, vendors, questionnaires, and abuse. Engineering still patches systems. You make sure the evidence is real and the auditor has a named owner.\r\nWe will train you on the tools (Vanta), vendor reviews, and SOC 2 audits. You need good judgment, follow-through, and clear writing.What you will doOwn GRC Tool (Vanta): failing controls, evidence, and following up with the people who actually fix things\r\nBe the primary contact for our SOC 2 auditor and the ISO 27001 certification body\r\nMaintain SOC 2 Type II compliance through audits (PBC lists, walkthroughs, findings response)\r\nRun vendor security reviews on a weekly cadence\r\nAnswer customer security questionnaires; stand up and maintain a current Trust Center\r\nOwn abuse / acceptable-use intake and enforcement process\r\nOwn spam reporting and email blocking\r\nKeep HIPAA, GDPR, and EU AI Act documents accurate\r\nFinish our ISO 27001 ISMS package: procedures, Statement of Applicability, internal audit, management review\r\nBuild a FedRAMP readiness folder (inventory, authorization boundary, control map from SOC 2/ISO to NIST 800-53). We start a 3PAO only if a named federal deal requires it\r\nUse AI to draft, research, and speed up routine GRC work; verify accuracy before any output is treated as auditable proof\r\nOwn employee security onboarding and offboarding (accounts and access, Vanta tasks, MDM, background-check evidence, timely leaver cutoff)What you needYou write clearly. This job is evidence, auditor email, and customer questionnaires\r\nYou can own a queue: pick up work, follow up professionally, close the loop, and see items through to completion\r\nYou work AI-first: you use automation to move faster, and you personally review the output before it becomes audit evidence or customer-facing material\r\nYou are willing to be the named contact for auditors and customers once trained\r\nBackground in security, compliance, IT, operations, or similar process work helps. Direct SOC 2 / Vanta / vendor-review experience is not required.Nice to haveSOC 2, ISO 27001, HIPAA, or GDPR exposure in any role\r\nVanta, Drata, Secureframe, Sprinto, or another GRC tool\r\nVendor security reviews or customer security questionnaires\r\nPolicies or procedures you wrote that someone else actually used\r\nNIST 800-53 or FedRAMP as a contributor\r\nCloud, IaaS, GPU cloud, or colocation familiarity\r\nTrust-and-safety, AUP, or abuse handling\r\nWe are a lean, ambitious team operating in one of the most important technology markets in the world. If you want ownership, pace, and the opportunity to do career-defining work alongside practical, high-agency teammates, MassedCompute is a great place to build.\r\nMarket competitive compensation\r\nWe are a remote-first company. You’ll get a stipend to dial in your setup and additional opportunities to connect with your peers during periodic in person team gatherings\r\nFlexible PTO policy with the expectation that you take the time you need to recharge\r\n100% coverage of medical, dental, and vision insurance for employees, 30% of premiums for dependents, plus a tax-advantaged Flexible Spending Account\r\nCompany-facilitated 401(k) retirement plan\r\nParental leave for all new parents\r\nWork AuthorizationApplicants must be legally authorized to work in the United States and obtain security clearance. We are unable to sponsor work visas for this position.\r\nMassed Compute is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by law.\r\nWhy the work mattersAI teams need compute today, and we give it to them.Most GPU providers ask for a long contract, a support queue, and a bill that takes a spreadsheet to understand. We built the friendlier option. On demand GPUs by the hour, bare metal for production workloads, and full clusters for serious training runs, all on hardware we own and run ourselves.\r\nReal infrastructureWe are an NVIDIA Preferred Partner running current data center GPUs in Tier III facilities, with SOC 2, GDPR, and HIPAA compliance behind the platform.\r\nReal customersResearchers, studios, startups, and enterprise teams run production work on Massed Compute every day. What you build reaches them the week you ship it.#J-18808-Ljbffr","datePosted":"2026-10-10T01:32:59.093Z","dateModified":"2026-10-10T01:32:59.093Z","hiringOrganization":{"@type":"Organization","name":"Massed Compute","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brooklyn","addressRegion":"NY","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"981ab65ac6963293e71e5e5f"},"url":"https://jobsearcher.com/jobs/981ab65ac6963293e71e5e5f"}}