Risk and Compliance Lead, Scale AI

• 3-5 years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry. Big 4 consulting experience is a plus
• Prior experience assessing or auditing cloud environments (AWS, Azure, and GCP), performing compliance assessments, conducting risk assessments and/or driving audits like SOX, ISO, SOC, PCI DSS
• Experience in security and compliance in a role that required cross-departmental collaboration
• An action-oriented mindset, balancing creative problem-solving with a strong drive to achieve outcomes
• Ability to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space
• Strong analytical, communication (verbal and written), and project management skills
• Experience leading day-to-day activities, improving processes, and owning outcomes
• Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCP

Desirable

• Reporting into the Governance, Risk and Compliance team, this role will include a mix of strategic and operational responsibilities working with cross functional stakeholders to understand the risks and establish governance and compliance processes and controls across our organization
• While focusing on details, you will be able to consider the big picture and make recommendations for processes and controls that align with Scale’s growth strategy
• You will also support both our Commercial and Public Sector business, ensuring that our compliance measures meet the specific needs of these different sectors
• Build a comprehensive Risk Management Program to help the business identify, measure, and manage known risks and actively work them to resolution. This includes collaborating with product, engineering, operations, people operations, and legal to implement new technical, administrative, and operational controls to ensure proper processes are in place
• Help create, maintain, and improve information security compliance initiatives (SOC 2, FedRAMP, ISO 27001) and spearhead any other compliance initiatives such as privacy compliance (GDPR, CCPA, Data Mapping Exercise)
• Work with the go to market team on customer security due diligence, including customer questionnaires and resolving current or prospective compliance requests
• Design, manage, and iterate on compliance initiatives across our remote worker network and business process outsourcing partners
• Develop and provide training to improve the security awareness and knowledge for all employees and contractors
• Conduct and initiate quarterly user access reviews over critical applications to ensure privileged access remains up to date
• Assist with internal and external audits

• PLEASE NOTE: Our policy requires a 90-day waiting period before reconsidering candidates for the same role. This allows us to ensure a fair and thorough evaluation of all applicants