Head of International Security

Join Scale as the Head of International Security, where you will lead and unify our security strategy across non-US markets. You will drive execution, customer engagements, and compliance with various regulatory frameworks while staying aligned with our global secure-by-default architecture. Your role will involve translating regional regulatory requirements into concrete engineering controls, tracking regional security metrics, and ensuring enterprise-grade protection of customer data and AI assets. You will also serve as the lead security partner in international enterprise and public sector engagements.

• Conduire l'exécution, les engagements clients et la conformité avec des cadres tels que le RGPD, l'ISO27001, les exigences de souveraineté spécifiques aux pays.
• Traduire les exigences réglementaires régionales en contrôles d'ingénierie concrets et suivre les métriques de sécurité régionales.
• Assurer la protection des données des clients, des ensembles de données propriétaires et des actifs d'IA dans les déploiements régionaux.
• Hands-on familiarity with GDPR, ISO 27001, SOC 2, UK Cyber Essentials Plus, NIS2, and the EU AI Act
• Strong technical depth in cloud-native security (AWS / GCP / Azure), IAM / Zero Trust, infrastructure security, logging and monitoring, and secure SDLC practices
• 8+ years in cybersecurity (security engineering, product security, detection/response, or cloud security), with at least 4 years leading or formally mentoring engineers in high-growth or enterprise environments
• Ability to operate cross-functionally with Engineering, Product, Legal, Compliance, Sales, and Public Sector stakeholders
• Demonstrated experience building and scaling security programs that materially improved risk posture
• Experience managing insider risk or securing environments with significant third-party, contractor, or marketplace-style user populations
• Right to work in the UK. Comfortable traveling regularly; willing to be vetted for country-specific clearances where customer engagements require it
• Active or eligible for UK clearance (SC or DV), NATO clearance, or equivalent in another allied jurisdiction
• Experience leading red-teaming, adversarial testing, or offense-informed defense programs
• Proven ability to build secure-by-design multi-tenant systems serving FTSE 100 / Euro Stoxx 50 / global Fortune 500 clients across multiple regulatory regimes
• Working knowledge of GCC (Gulf Cooperation Council) sovereign compliance and privacy regulations (such as UAE DESC CSP and Qatar NCSA NISCF/NIA)
• Experience operating at the intersection of enterprise SaaS and government or national security customers
• Familiarity with AI-specific threat vectors such as training data poisoning, prompt injection, tool/plugin abuse, and protection of model-related IP
• Experience securing AI / ML platforms, LLM-based systems, or agentic applications