Public Sector Security & Compliance Lead

Visa Hunt; Washington; On-site; USD 214,000 - 267,000; Full time

Job summary

Scale seeks a Technical Assurance Lead to drive assurance programs across public sector and commercial business. This hands-on role partners with product, engineering, security, operations, legal, and people ops to implement controls and manage audits.

A Top Secret clearance and US-focused expertise are preferred. The role reports to the Head of Global Assurance and requires coordinating with 3PAOs, external assessors, and regulatory bodies to sustain certifications and customer assurance

Qualifications

• 7+ years in security, audit, or GRC roles.
• Experience with FedRAMP, NIST, CMMC, and RMF.
• Hands-on with evidence collection, POAM, and audits.
• Ability to translate risk to leadership.

Responsibilities

• Lead public sector compliance programs and coordinate with 3PAOs and external assessors.
• Oversee Security Risk Management A&A processes, including risk assessments and POAMs.
• Drive cross-functional control implementation with product, engineering, security, and legal teams.
• Set intake, evidence collection, remediation tracking, and cadence; report health and risks.
• Manage auditors, assessors, and regulatory counterparts to sustain outcomes.
• Maintain security docs and GRC tooling; upload evidence to eMASS/Xacta.
• Lead reviews for new products; advise on certifications and regulatory changes.
• Maintain Scale's certification portfolio (SOC 2, ISO 27001/42001, ISO 9001).
• Support customer assurance activities and security questionnaires.

Skills

FedRAMP High

DoD SRG IL4/IL5/IL6

NIST 800-53

NIST 800-171

CMMC

RMF

eMASS/Xacta

Cloud security

GRC

Audit coordination

Education

Bachelor's in CS/IS/related

Tools

AWS

Azure

GCP

Job description

Scale seeks a Technical Assurance Lead to drive assurance programs across public sector and commercial business. This hands-on role partners with product, engineering, security, operations, legal, and people ops to implement controls and manage audits.

A Top Secret clearance and US-focused expertise are preferred. The role reports to the Head of Global Assurance and requires coordinating with 3PAOs, external assessors, and regulatory bodies to sustain certifications and customer assurance