Security Assurance Lead Public Sector & Enterprise

Scale AI; Washington (District of Columbia); On-site; USD 213,600 - 267,000; Full time

Job summary

Scale AI in Washington, DC seeks a Technical Assurance Lead to drive assurance programs across our public sector and commercial businesses. This hands-on IC role reports to the Head of Global Assurance and partners with Product, Engineering, Security, and Legal to secure audits, evidence, and certifications.

You will oversee FedRAMP, DoD SRG, NIST, and other frameworks, coordinate with 3PAOs, manage evidence in eMASS/Xacta, and guide teams through remediation and continuous compliance in a

Qualifications

• 7+ years of experience in security compliance, technology audit, or GRC.
• Experience with FedRAMP, DoD RMF, NIST 800-53/800-171, and CMMC.
• Strong ability to map controls, collect evidence, and coordinate audits.
• Experience with cloud providers (AWS, Azure, GCP) and security architecture.

Responsibilities

• Lead public sector compliance programs including FedRAMP HIGH and DoD SRG.
• Oversee risk management A&A processes and POAM development.
• Drive cross-functional control implementation with product, engineering, security, and legal.
• Manage external auditors, 3PAOs, and certification bodies.
• Maintain system security docs and upload evidence to eMASS or Xacta.
• Lead reviews for new products and advise on regulatory changes.

Skills

Security risk management

Audit coordination

Cloud security

Policy interpretation

Education

Bachelor's degree in a related field

Tools

eMASS

Xacta

ACAS

Job description

Scale AI in Washington, DC seeks a Technical Assurance Lead to drive assurance programs across our public sector and commercial businesses. This hands-on IC role reports to the Head of Global Assurance and partners with Product, Engineering, Security, and Legal to secure audits, evidence, and certifications.

You will oversee FedRAMP, DoD SRG, NIST, and other frameworks, coordinate with 3PAOs, manage evidence in eMASS/Xacta, and guide teams through remediation and continuous compliance in a