EMEA Assurance Lead

About Scale and Role Overview

Scale is at the forefront of the generative AI revolution, delivering essential data and infrastructure to empower organizations in building expansive foundational AI models. With rapid advancements in AI reshaping industries globally, Scale is scaling operations to match the growing demand, specifically enhancing its presence in public sector initiatives throughout the EMEA region.

We are seeking a dedicated EMEA Assurance Lead to spearhead assurance programs across our EMEA public sector and commercial divisions. This hands-on role reports to the Head of Global Assurance and operates with significant independence. The individual will own the design and implementation of EMEA-specific controls aligned with Scale's global assurance framework, coordinating closely with global teams and external stakeholders to drive compliance and certification efforts.

Key Responsibilities

• Lead assurance initiatives specific to the GCC and UK regions, managing programs such as Qatar NCSA National Information Assurance, KSA NCA Essential Cybersecurity Controls, UAE DESC Information Security Regulation, and UK Cyber Essentials Plus, Defence Cyber Certification, and NCSC Secure by Design. Oversight includes controls mapping, gathering evidence, identifying gaps, managing certification schedules, and liaising with accredited external assessors as needed.
• Collaborate with the global GRC team to maintain and renew certifications like SOC 2, ISO 27001, ISO 42001, and ISO 9001 while expanding these certifications to encompass EMEA and international operations, including NATO-aligned defense tenders.
• Develop and manage EMEA-focused controls by tailoring Scale's global frameworks to meet sovereign regulatory and client expectations, addressing conditions such as data residency and sector-specific regulations (e.g., healthcare), and determining the necessity for new controls or evidence.
• Establish priorities and operational rhythms for assurance workflows in EMEA, covering intake, evidence gathering, engagement with control owners, remediation tracking, and deadline adherence; provide progress updates via Scale’s global assurance dashboards.
• Support public sector customer assurance efforts through security questionnaires, compliance due diligence, assurance discussions, and input on procurement processes where certification readiness is a critical gate.
• Work alongside the Legal team regarding contract-based assurance obligations, data protection laws, AI governance regulations (such as GDPR, Qatar PDPPL, EU AI Act), and manage sensitive compliance escalations involving sovereign regulators.
• Foster relationships with EMEA-based auditors, assessors, certification authorities, and regulatory bodies.
• Assist with internal and external audit activities across EMEA and regularly report program status, risks, certification timelines, and regional regulatory developments to the Head of Global Assurance.

Candidate Profile and Qualifications

• Minimum of seven years' experience in cybersecurity compliance, governance risk and compliance (GRC), public sector assurance, IT audit, or cloud security roles with substantial exposure to EMEA markets.
• Proven track record managing government or public sector assurance initiatives within the UK, EU, or GCC regions, including collaboration with certification authorities and government assessors.
• Comprehensive knowledge of standards such as UK Cyber Essentials/Cyber Essentials+, ISO 27001, ISO 9001, ISO 42001, SOC 2, and familiarity with GCC sovereign security regimes including Qatar NCSA NIA, KSA SCCC/NCA, UAE DESC/NESA.
• Well-versed in EMEA data protection and AI governance mandates (e.g., GDPR, PDPPL, EU AI Act), understanding their translation into organizational and technical controls.
• Experience coordinating controls mapping, evidence collection, remediation efforts, and audits across distributed engineering and infrastructure teams.
• Hands-on familiarity with cloud platforms like AWS, Azure, or GCP, coupled with the ability to evaluate cloud architectures against compliance standards.
• Excellent communication abilities, good judgment for escalation procedures, and the capability to work autonomously within the region while ensuring alignment with global programs.

Desirable Skills

• Professional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor, ISO 42001 Internal Auditor, or CCSP.
• Experience with NATO information assurance standards or defense procurement requirements.
• Knowledge of health sector or medical device regulations within EMEA, predominantly in the GCC and UK.
• Proficiency in Arabic language.
• Hold or eligible for UK Security Clearance (SC or DV) or equivalent security clearances within EMEA government agencies.
• Background experience working in Big 4 consulting or high-growth tech companies.

Additional Information

Residency and Work Authorization in Qatar: Candidates applying from Qatar must have relevant permissions, including visas and permits authorized by Qatari authorities. Applicants will provide personal details such as residency status and nationality during the hiring process solely for immigration compliance. Visa issuance is subject to government discretion. Successful candidates will receive support from Scale to facilitate visa acquisition.

Recruitment Policy: Scale maintains a 90-day waiting period before reconsidering applicants for the same role to uphold fair and thorough evaluation standards.

About Scale

Scale’s mission is to build trustworthy AI systems that guide critical decisions worldwide. Our comprehensive products deliver high-quality data and technologies that power leading AI models, assisting enterprises and governments in deploying and overseeing impactful AI applications. We partner with notable organizations such as Meta, Ernst & Young, Mayo Clinic, Time Inc., Qatar’s Government, and various U.S. federal agencies including the Army and Air Force. We are expanding our team to accelerate AI development globally.

Equal Opportunity and Inclusion

We champion an inclusive environment where people can bring their authentic selves to work. We provide equal employment opportunities regardless of race, religion, gender, nationality, sexual orientation, age, disability, or veteran status. Reasonable accommodations for applicants with disabilities are available upon request.

Privacy and Data Usage

Applicant personal data is collected, handled, and retained for professional business purposes compliant with relevant laws and our privacy policies. Data is used for applicant management, communication regarding job opportunities, and shared with affiliated entities as necessary. Detailed privacy practices are available in our policy documents.