Manager - Audit, Risk, and Controls
Nscale is a London-based, full-stack AI cloud and infrastructure company that provides GPU compute, managed AI services, orchestration software, data centers, and power infrastructure for AI training, fine-tuning, and inference.
Funding history
About Nscale
Nscale builds and operates vertically integrated AI infrastructure spanning software, GPU compute, networking, storage, purpose-built data centers, and power. Its active cloud platform offers self-service inference endpoints, fine-tuning, managed Kubernetes and Slurm, virtual machines, and GPU clusters.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead the design, implementation, and improvement of audit, risk management, and internal controls frameworks. You will conduct risk assessments and audits, maintain risk and controls records, coordinate external audits, monitor compliance requirements, and prepare audit, risk, and remediation reports for leadership.
Requirements
- Substantial experience in internal audit, risk management, or controls roles
- Knowledge of IIA standards, the COSO Internal Control Framework, ISO 31000, and NIST RMF
- Experience designing and implementing internal control frameworks across financial, operational, and IT domains
- Knowledge of SOC 2, ISO 27001, GDPR, and sector-specific regulations
- Audit and risk assessment skills
- Experience with audit management tools and GRC platforms
- CIA, CISM, or similar professional certification preferred
Responsibilities
- Establish risk appetite frameworks and key risk indicators
- Conduct risk workshops, scenario planning, and stress testing
- Design, document, and implement internal control frameworks
- Design and oversee internal audit plans
- Conduct or coordinate internal audits across financial, operational, compliance, and IT domains
- Maintain audit documentation, working papers, and evidence repositories
- Coordinate external audits and track remediation of findings
- Develop audit charters, policies, and procedures
- Lead enterprise risk assessments
- Maintain the risk register and monitor mitigation strategies
- Establish control testing protocols and assess control effectiveness
- Identify control gaps and recommend improvements
- Maintain controls inventory and testing schedules
- Monitor regulatory and compliance requirements
- Support compliance with SOC 2, ISO standards, Cyber Essentials Plus, and other frameworks
- Prepare compliance status reports, remediation plans, audit reports, and risk summaries