Governance, Risk and Compliance Lead

Job Description

Scale is powering the generative AI wave by providing the data and infrastructure for companies to build large-scale foundation models. AI is rapidly changing the world, and Scale is growing to meet that rapid demand.  As the Governance, Risk and Compliance Lead, you will play an instrumental role in ensuring effective risk management, empowering the team’s mission to protect and advance the business.

Reporting into the Governance, Risk and Compliance team, this role will include a mix of strategic and operational responsibilities working with cross functional stakeholders to understand the risks and establish governance and compliance processes and controls across our organization. While focusing on details, you will be able to consider the big picture and make recommendations for processes and controls that align with Scale’s growth strategy.  You will also support both our Commercial and Public Sector business, ensuring that our compliance measures meet the specific needs of these different sectors.

Location: San Francisco (will need to work from office 3x per week) 

You Will:

• Build a comprehensive Risk Management Program to help the business identify, measure, and manage known risks and actively work them to resolution. This includes collaborating with product, engineering, operations, people operations, and legal to implement new technical, administrative, and operational controls to ensure proper processes are in place.
• Help create, maintain, and improve information security compliance initiatives (SOC 2, FedRAMP, ISO 27001) and spearhead any other compliance initiatives such as privacy compliance (GDPR, CCPA, Data Mapping Exercise).
• Work with the go to market team on customer security due diligence, including customer questionnaires and resolving current or prospective compliance requests.
• Design, manage, and iterate on compliance initiatives across our remote worker network and business process outsourcing partners. 
• Develop and provide training to improve the security awareness and knowledge for all employees and contractors.
• Conduct and initiate quarterly user access reviews over critical applications to ensure privileged access remains up to date.
• Assist with internal and external audits.

Minimum Qualifications:

• 3-5 years of relevant work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry. Big 4 consulting experience is a plus.
• Prior experience assessing or auditing cloud environments (AWS, Azure, and GCP), performing compliance assessments , conducting risk assessments and / or driving audits like SOX, ISO, SOC, PCI DSS.
• Experience in security and compliance in a role that required cross-departmental collaboration.
• An action-oriented mindset, balancing creative problem-solving with a strong drive to achieve outcomes.
• Ability to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space.
• Strong analytical, communication (verbal and written), and project management skills.
• Experience leading day-to-day activities, improving processes, and owning outcomes.
• Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCP.

Preferred Qualifications:

• Experience in a high growth technology company.
• Experience applying AI or Machine Learning.
• Previous work as a security consultant or Big 4 consulting.

Note this role must be based within the continental United States and requires current US Citizenship to support Scale’s Public Sector business.