Manager - Audit, Risk, and Controls

About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. At Nscale, our finance team plays a critical role in ensuring financial stability, strategic growth and compliance. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We are seeking a Manager in Audit, Risk & Controls to lead the design, implementation, and continuous improvement of Nscale's enterprise-wide audit, risk management, and internal controls framework. This role is pivotal in ensuring organizational resilience, regulatory compliance, and operational excellence across all business functions and geographies. You will work closely with the Director of Audit, Risk & Controls (or equivalent leadership). What You'll Do various activities across Audit, Risk and SOX work streams as directed by Director Audit, Risk & Controls, including but not limited to: • Establish risk appetite frameworks and KRIs (Key Risk Indicators) aligned with business objectives and board expectations. • Conduct risk workshops with business leaders to identify emerging risks and validate risk mitigation strategies. Support scenario planning and stress testing for critical business processes and infrastructure. • SOX and Internal Controls Framework Design, document, and implement internal control frameworks (COSO, SOX-aligned where applicable) across key business processes. • Audit Program & Governance Reporting & Communication Design and oversee the internal audit plan, ensuring comprehensive coverage of key business processes, systems, and risk areas across infrastructure, operations, product, and corporate functions. • Conduct or coordinate internal audits across financial, operational, compliance, and IT domains, documenting findings and recommendations with clear remediation timelines. Maintain audit documentation, working papers, and evidence repositories to support external audits • Support external audit coordination, including liaison with external auditors, preparation of audit schedules, and tracking remediation of audit findings. • Develop and maintain audit charters, policies, and procedures aligned with best practices (IIA standards, COSO framework). • Risk Management & Assessment Lead enterprise risk assessments across operational, financial, compliance, strategic, and technology domains. • Develop and maintain the organization's risk register, including risk identification, assessment, mitigation strategies, and monitoring. • Establish control testing protocols and coordinate periodic control effectiveness assessments. Identify control gaps and recommend improvements to strengthen operational resilience and compliance posture. • Support the design of preventive and detective controls for high-risk areas (e.g., access management, financial transactions, data security). • Maintain a controls inventory and testing schedule, ensuring evidence of control operation is documented and available for audit. • Compliance & Regulatory Alignment Monitor regulatory and compliance requirements relevant to Nscale's operations (data protection, financial reporting, sector-specific regulations). • Ensure audit, risk, and controls activities support compliance with SOC 2 Type II, ISO 27001/27017/27018, Cyber Essentials Plus, ISO 22301, and other applicable frameworks. Coordinate with Legal, Information Security, and Finance to ensure integrated compliance and risk management. • Prepare compliance status reports and remediation plans for board and management review. Develop clear, actionable audit reports and risk summaries for senior leadership and the board. • Continuous Improvement & Enablement About You • A proven record in internal audit, risk management, or controls roles, with substantial experience in high-growth, regulated, or complex technology environments. • Deep knowledge of audit frameworks (IIA standards, COSO Internal Control Framework) and risk management methodologies (ISO 31000, NIST RMF). • Proven experience designing and implementing internal control frameworks across financial, operational, and IT domains. • Strong understanding of compliance frameworks relevant to cloud infrastructure, data security, and AI (SOC 2, ISO 27001, GDPR, sector-specific regulations). • Excellent audit and risk assessment skills, including the ability to identify control gaps and recommend practical improvements. • Experience with audit management tools and GRC platforms (e.g., Workiva, AuditBoard, Domo, or similar). • Ideally CIA or CISM qualified or a similar professional certificate. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Nscale does not accept unsolicited candidate submissions from recruitment agencies.