EMEA Assurance Lead

Scale AI; Dubai; On-site; AED 250,000 - 350,000; Full time

Benefits offered by this job

Comprehensive health coverage

Annual learning & development stipend

Flexible PTO policies

Parental support policies

Job summary

Scale AI is looking for an EMEA Assurance Lead based in Dubai to manage assurance programs across public and commercial sectors. You will play a critical role in designing region-specific controls and work closely with various teams to ensure compliance with international standards.

Successful candidates will have at least 7 years of experience in cybersecurity compliance and be familiar with UK Cyber Essentials, ISO 27001, and other frameworks. Strong communication skills and the ability to work autonomously while aligning with global guidelines are essential.

The role entails managing external auditor relationships and supporting EMEA public sector assurance activities.

Qualifications

• Deep familiarity with ISO 27001, UK Cyber Essentials, or equivalent frameworks.
• Strong communication skills and sound judgment on escalation.
• 7+ years of experience in cybersecurity compliance or IT audit.

Responsibilities

• Drive assurance programs across EMEA, focusing on governance and compliance.
• Design and maintain region-specific controls aligned with international standards.
• Manage relationships with external auditors and regulatory bodies.

Skills

Cybersecurity compliance

Public sector assurance

Cloud security

Communication skills

Controls mapping

Education

7+ years in relevant fields

Relevant certifications (CISSP, CISM, etc.)

Tools

GRC platforms

Cloud environments (AWS, Azure)

Job description

• Scale seeks an EMEA Assurance Lead to drive assurance programs across Scale’s EMEA public sector and commercial business
• Reporting to the Head of Global Assurance, this is a hands‑on individual contributor role with significant autonomy
• You will independently design and own EMEA‑specific controls within Scale’s global assurance framework, while staying tightly aligned with the global controls library and reporting cadences
• You will be part of the global GRC team and work across Global Public Sector, Enterprise, Security, Engineering, Product, and Legal to deliver region‑specific authorizations, certifications, and customer assurance outcomes across EMEA, with a focus on the GCC, UK, and EU markets
• Lead region‑specific assurance programs across the GCC and UK, including Qatar NCSA National Information Assurance (NIA), KSA NCA Essential Cybersecurity Controls (ECC), UAE DESC Information Security Regulation (ISR), and UK Cyber Essentials Plus, Defence Cyber Certification (DCC), and NCSC Secure by Design (SdB)
• You will own controls mapping, evidence collection, gap analysis, certification timelines, and submission management for each, working with accredited external assessors where required
• Work with the global GRC team to maintain and renew Scale’s existing certifications and obtain new ones, including SOC 2, ISO 27001, ISO 42001, and ISO 9001. You will also own their extension to EMEA and international operations, including for NATO‑aligned defence tenders
• Design and maintain EMEA‑specific controls, adapting Scale’s global controls framework to sovereign regulatory and customer requirements (including data residency and sector‑specific requirements, e.g., health sector), identifying where existing controls satisfy local standards and where new controls or evidence artifacts are needed
• Set priorities and operating cadences for EMEA assurance workflows, including intake, evidence collection, control owner follow‑up, remediation tracking, and deadline management, reporting progress through Scale’s global assurance dashboards
• Support EMEA public sector customer assurance activities, including security questionnaires, compliance due diligence responses, customer‑facing assurance discussions, and compliance input to bid and capture processes where assurance readiness is a procurement gate
• Partner with Legal on EMEA contract‑driven assurance obligations, data protection and AI governance compliance intersections (e.g., GDPR, Qatar PDPPL, EU AI Act), and sensitive escalations involving sovereign regulators
• Manage relationships with EMEA‑based external auditors, assessors, certification bodies, and regulatory counterparts
• Support internal and external audits across EMEA and report into the Head of Global Assurance on program health, key risks, certification timelines, and regional regulatory developments

Benefits

• Health & Wellbeing: Our holistic approach to supporting Scaliens includes comprehensive health coverage, dental and vision insurance, mental healthcare services, and more. PTO policies and accommodating schedules ensure you’ll get time off when you need it to relax and recharge. Note that our offerings may vary by region as we strive to respond to the unique needs of Scaliens around the globe.
• Personal & Career Growth: Continuously learn and grow through annual learning & development stipend, attending leadership breakfasts, manager training, speaker series, and joining an ERG.
• Building Scale Community: We welcome guests to our offices, and you can expect to see Scalien families and friends around. Join local happy hours, and accept invites to game nights, book clubs, and many other employee‑led community events.
• Parental Support: Balancing work and family is essential, and Scale understands the importance of having adequate leave policies in place to promote a healthy home and work life.

Qualifications

• Deep familiarity with one or more of: UK Cyber Essentials/Cyber Essentials+, ISO 27001, ISO 9001, ISO 42001, SOC 2, or equivalent frameworks, and with sovereign security regimes in the GCC (e.g., Qatar NCSA NIA, KSA SCCC/NCA, UAE DESC/NESA).
• Strong communication skills, sound judgment on escalation, and the ability to operate autonomously in a region while maintaining alignment with a global program.
• Familiarity with relevant EMEA data protection and AI governance requirements (e.g., GDPR, PDPPL, EU AI Act) and how they translate into technical and organisational controls.
• 7+ years of experience in cybersecurity compliance, GRC, public sector assurance, IT audit, cloud security, or related roles, with meaningful exposure to EMEA markets.
• Experience executing government or public sector assurance programs in the UK, EU, or GCC, including working with external certification bodies, government assessors, or authorizing officials.
• Experience with cloud environments (one or more of: AWS, Azure, GCP) and the ability to assess cloud architecture against compliance requirements.
• Experience managing controls mapping, evidence collection, remediation tracking, and audit coordination across distributed engineering and infrastructure teams.
• Relevant certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor, ISO 42001 Internal Auditor, or CCSP.
• Experience with NATO information assurance standards or defence procurement prerequisites.
• Familiarity with EMEA health‑sector or medical‑device regulatory requirements, particularly in the GCC and the UK.
• Working knowledge of Arabic.
• UK SC or DV clearance, or eligibility for equivalent EMEA government security clearances.
• Experience at a Big 4 firm or in a high‑growth technology company.