<p>Scale AI sits at the intersection of frontier AI, enterprise software, and national security. We safeguard high-value assets: proprietary AI data and infrastructure, a global contributor ecosystem, and sensitive enterprise and government customer data.</p> <p>As our International Head of Security, you will own and unify Scale’s security strategy across our non-US affairs: Global Public Sector and non-US Enterprise deals. You will drive the execution, customer engagements and compliance with frameworks such as GDPR, ISO27001, UK Cyber Essentials Plus, the EU AI Act, NIS2 and country-specific sovereignty requirements while staying tightly aligned to our global secure-by-default architecture set by the Head of Security.</p> <p>As we expand into FDE-led Agentic Applications while continuing to serve our data and model customers, our security surface area spans internal systems, external products, distributed contributors, and high-assurance government environments. You are a builder who believes security is a product feature, not a hurdle — and who can raise both our defensive maturity and our ambition in frontier AI security.</p> <h2><strong>What You'll Do</strong></h2> <h3><strong>Execute the Global Security Strategy Across International Markets</strong></h3> <ul> <li>Drive execution of Scale's multi-year secure-by-default roadmap across non-US markets, surfacing regional needs into global architecture decisions.</li> <li>Translate regional regulatory requirements (GDPR, ISO 27001/27017/27018, SOC 2, UK Cyber Essentials Plus, EU AI Act, NIS2, and country-specific data residency / sovereign-cloud rules) into concrete engineering controls.</li> <li>Track regional security metrics and accountability, and represent the international perspective in global prioritisation, audits, and roadmap reviews.</li> </ul> <h3><strong>Lead Regional Security Engineering & Threat Detection</strong></h3> <ul> <li>Own the regional execution of identity, fine-grained RBAC, secrets management, CI/CD hardening, encryption, logging, and infrastructure protection with a particular focus on cross-border data flows and in-region telemetry.</li> <li>Stand up high-fidelity detection and response capabilities that meet local time zone coverage, breach-notification timelines, and regulator expectations.</li> <li>Drive systemic risk reduction through platform-level controls, partnering with the global security engineering team rather than building parallel stacks.</li> </ul> <h3><strong>Secure Products, Data, and AI Systems for International Customers</strong></h3> <ul> <li>Ensure enterprise-grade protection of customer data, proprietary datasets, and AI assets across regional deployments, including support for in-region processing, encryption with customer-managed keys, and data-localisation commitments.</li> <li>Design and enforce robust multi-tenant isolation, fine-grained RBAC, and privilege lifecycle management across customer environments serving international enterprises and public sector buyers.</li> <li>Address AI-specific attack surfaces; prompt injection, tool abuse in agentic workflows, data exfiltration, and model/data integrity risks.</li> <li>Champion secure SDLC practices, threat modeling, and code review standards within FDE teams.</li> </ul> <h3><strong>Lead Insider Risk & Contributor Integrity Across International Populations</strong></h3> <ul> <li>Partner with Product and Operations to reduce fraud, account compromise, collusion, and identity-based abuse without degrading platform usability, particularly in higher-risk regions.</li> <li>Implement strong auditability, privilege governance, and behavioural anomaly detection across sensitive workflows in a way that is defensible to international regulators.</li> </ul> <h3><strong>Be the Lead Security Partner for International Customers & Governments</strong></h3> <ul> <li>Serve as the lead security partner in international enterprise and public sector engagements; running customer security reviews, supporting regulator interactions, and shaping trust narratives across the UK, EU, MENA, and beyond.</li> <li>Drive execution of the international clearable-infrastructure plan without fragmenting the core platform.</li> <li>Partner with Sales, Legal, and Compliance to streamline security reviews and build durable customer confidence.</li> </ul> <h2><strong>Qualifications</strong></h2> <h3><strong>Required</strong></h3> <ul> <li>8+ years in cybersecurity (security engineering, product security, detection/response, or cloud security), with at least 4 years leading or formally mentoring engineers in high-growth or enterprise environments.</li> <li>Demonstrated experience building and scaling security programs that materially improved risk posture.</li> <li>Strong technical depth in cloud-native security (AWS / GCP / Azure), IAM / Zero Trust, infrastructure security, logging and monitoring, and secure SDLC practices.</li> <li>Hands-on familiarity with GDPR, ISO 27001, SOC 2, UK Cyber Essentials Plus, NIS2, and the EU AI Act.</li> <li>Experience managing insider risk or securing environments with significant third-party, contractor, or marketplace-style user populations.</li> <li>Ability to operate cross-functionally with Engineering, Product, Legal, Compliance, Sales, and Public Sector stakeholders.</li> <li>Right to work in the UK. Comfortable traveling regularly; willing to be vetted for country-specific cl