What You’ll Do
The Product Engineering organization is responsible for executing and delivering CoreWeave’s products, platforms, processes, and tools. As a security compliance lead, you will creatively shape compliance solutions that enhance both security, engineering and business agility. You will collaborate closely with innovative teams to turn compliance from a checklist into a strategic advantage. You will be part of an environment that values proactive thinking, creative problem-solving, and meaningful impact.
If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you!
In this role, you will:
- Partner closely with stakeholders to design, implement, and enhance security, operational, and privacy controls
- Conduct readiness assessments and guide control owners to seamlessly navigate external audits and internal obligations
- Actively manage compliance and regulatory lifecycles, ensure clarity and simplicity in tracking, evidence gathering, and reporting
- Collaborate with Product, Solution Architect, and Engineering teams to streamline compliance requirements, fostering innovation and efficiency
- Continuously assess control maturity, and uncover creative opportunities for automation and process improvements that benefit the entire organization
- Mentor junior TPMs and technical leads in audit best practices
Investing in our people is one of our top priorities, and we value candidates who can bring their diversified experiences to our teams. Here are some qualities we’ve found compatible with our team. We'd love to talk about whether this aligns with your experience and interests and what you’re excited to work on next.
Who You Are
Minimum Qualifications
- At least 10 years of hands-on experience in Security Compliance, Audit, ideally within the cloud services industry
- A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience
- Proven track record conducting comprehensive assessments of control frameworks, identifying strengths, gaps, and actionable improvements
- 3-5 years of experience leading large-scale compliance frameworks (SOC 2, ISO 27001, ISO27701, HITRUST, PCI) in a fast-paced, technical environment
- Experience automating compliance evidence collection or reporting processes
- Strong ability to collaborate effectively with diverse remote teams across engineering, infrastructure, and security
- Excellent communication skills, transparent documentation practices, and meticulous record-keeping capabilities
- Familiarity with at least one of the GRC platforms: Anecdotes, OneTrust,HyperProof, Archer, ServiceNow GRC, Vanta, Drata etc.
- Experience managing multiple audits and certification cycles.
- Manage planning and tracking through tools such as Jira, Confluence, Asana, or similar
Preferred Qualifications
- Creative experience leveraging compliance activities to drive business growth and innovation
- Proven success in simplifying complex regulatory obligations into clear, actionable strategies
- Experience with multiple cloud platforms (AWS, GCP, or Azure) and security tooling. Solid understanding of cloud security risks and controls
- Certifications (e.g., CISSP, CISA, CISM, CRISC)
If you're eager to elevate compliance into a creative, strategic force within a fast-paced, forward-thinking company, we'd love to hear from you!
The base salary range for this role is $122,000 to $237,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).
What We Offer
The range we’ve posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location.
In addition to a competitive salary, we offer a variety of benefits to support your needs, including:
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Voluntary supplemental life insurance
- Short and long-term disability insurance
- Flexible Spending Account
- Health Savings Account
- Tuition Reimbursement
- Ability to Participate in Employee Stock Purchase Program (ESPP)
- Mental Wellness Benefits through Spring Health
- Family-Forming support provided by Carrot
- Paid Parental Leave
- Flexible, full-service childcare support with Kinside
- 401(k) with a generous employer match
- Flexible PTO
- Catered lunch each day in our office and data center locations
- A casual work environment
- A work culture focused on innovative disruption
Our Workplace
While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration
California Consumer Privacy Act - California applicants only
CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.
As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: [email protected].
Export Control Compliance
This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.
Top Skills
CoreWeave Livingston, New Jersey, USA Office
Livingston, NJ, United States
CoreWeave New York, New York, USA Office
New York, NY, United States
Similar Jobs at CoreWeave
What you need to know about the NYC Tech Scene
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
