Human Risk Lead

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We’re hiring a Human Risk Lead to own the human layer of security at Nscale: awareness, behavior, and policy adoption across our global AI infrastructure.

This is a senior individual contributor role at the intersection of people, security, data, and program management. You’ll build the function from the ground up, working closely with every control tower and partnering with Insider Risk, Detection Engineering, HR, Legal, policy owners, and compliance engineering.

You’ll create a program that treats human risk as an engineering and data problem—not simply a training problem—combining behavioral analytics, security telemetry, insider risk, and organizational insights to make risk visible, drive measurable behavior change, and build a culture where security is a shared instinct.

What you'll be doing

Security Awareness and Behavior Change

• Build and operate Nscale’s Security Awareness and Training program, delivering engaging, role-based learning for engineering, operations, corporate functions, executives, and privileged users.
• Update training using threat intelligence, incident learnings, emerging attacker techniques, regulatory changes, and AI-specific risks.
• Evaluate awareness initiatives through behavioral outcomes rather than relying only on completion metrics.
• Create targeted interventions that reduce risky behavior and improve phishing and social-engineering resilience.

Human Risk Data and Insights

• Build and own a data pipeline that combines learning outcomes, phishing exercises, identity signals, endpoint telemetry, policy adoption, collaboration patterns, and security events.
• Develop behavioral risk metrics that show where risk is concentrated across populations, functions, and business units.
• Make human risk queryable by creating a live picture of behavioral risk rather than relying on quarterly reporting.
• Define executive dashboards that communicate program maturity, behavioral trends, and opportunities for improvement.

Insider Risk and Governance

• Partner with Insider Risk, Detection Engineering, HR, and Legal to understand behavioral indicators, trusted insider risks, and realistic abuse scenarios.
• Use behavioral analytics and incident trends to identify preventative education and risk-reduction opportunities while respecting privacy and governance boundaries.
• Differentiate accidental, negligent, and malicious behaviors so interventions are appropriately targeted.
• Translate relevant incident learnings into practical guidance and program improvements.

Security Culture and Champions

• Build and scale a Security Champions program that empowers advocates across engineering and business teams.
• Create repeatable communications, workshops, office hours, and community events that make security approachable and relevant.
• Foster a blame-free culture where employees confidently report suspicious activity, ask questions, and treat security as a shared responsibility.
• Partner with leaders to embed secure behaviors into day-to-day workflows.

Policy and Program Management

• Partner with policy owners to translate security policies and standards into clear, actionable employee guidance.
• Manage policy communication, attestation, and adoption in a way that supports audit requirements.
• Own the human risk roadmap, communications calendar, and awareness initiatives, balancing regulatory requirements, emerging threats, and business priorities.
• Continuously improve the program through behavioral metrics, employee feedback, incident trends, operational data, and experimentation.

KPIs

• Mandatory and role-based training coverage, engagement, and timely completion
• Phishing reporting rates and reduction in repeat susceptibility
• Measurable behavior change following targeted interventions
• Human risk data coverage, freshness, quality, and automation

About You

• 8+ years of experience in security awareness, human risk management, or security engineering with a human risk focus.
• Experience running a security training or awareness platform and developing role-based learning programs.
• Experience managing policy communication, attestation, and adoption.
• Hands-on experience with platforms such as KnowBe4, Hoxhunt, or SoSafe, including APIs and integrations.
• Data fluency, including the ability to join training, phishing, and identity data using SQL or similar tools.
• Experience using automation and AI-assisted workflows to reduce manual program work.
• Experience with phishing simulations, behavior-change approaches, and behavioral or insider risk signals.
• Strong metrics, reporting, program management, and cross-functional coordination skills.
• Ability to communicate security clearly and engagingly to non-technical audiences.
• Experience in a high-growth technology, regulated, critical infrastructure, or infrastructure environment; relevant certifications such as CISSP or CISM are beneficial.

What we can offer you

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.

• Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
• Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed.
• Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.
• Human-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.

Equal Opportunities Statement

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

If there’s anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.

Salary Range

The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.