EMEA Assurance Lead

About the role

Scale is seeking an EMEA Assurance Lead to own and drive assurance programmes across its public‑sector and commercial business in the EMEA region. Reporting to the Head of Global Assurance, this individual contributor role offers significant autonomy to design and implement region‑specific controls within Scale’s global GRC framework.

Key responsibilities

• Lead assurance programmes for GCC, UK and EU markets, managing certifications such as Qatar NCSA NIA, KSA NCA ECC, UAE DESC ISR, UK Cyber Essentials Plus, DCC and NCSC Secure by Design.
• Own controls mapping, evidence collection, gap analysis, certification timelines and submission management, coordinating with external assessors.
• Maintain and extend existing certifications (SOC 2, ISO 27001, ISO 42001, ISO 9001) to EMEA and international operations, including NATO‑aligned defence tenders.
• Design and adapt EMEA‑specific controls to meet sovereign regulatory and sector‑specific requirements (e.g., data residency, health sector).
• Set priorities and operating cadences for assurance workflows, track remediation, and report progress via global dashboards.
• Support public‑sector customer assurance activities, including security questionnaires, compliance due‑diligence, and bid processes.
• Partner with Legal on contract‑driven assurance obligations and data‑protection/AI‑governance compliance (GDPR, Qatar PDPPL, EU AI Act).
• Manage relationships with external auditors, assessors, certification bodies and regulatory counterparts.

Required profile

• Proven experience designing and operating assurance or GRC programmes in EMEA, preferably within the technology or AI sector.
• Deep knowledge of regional security standards and certifications listed above.
• Strong ability to work cross‑functionally with engineering, product, security, legal and commercial teams.
• Excellent analytical and project‑management skills with a focus on delivering results on schedule.

Required skills

• Familiarity with SOC 2, ISO 27001, ISO 42001, ISO 9001 frameworks.
• Experience with regional certifications: Qatar NCSA NIA, KSA NCA ECC, UAE DESC ISR, UK Cyber Essentials Plus, DCC, NCSC Secure by Design.
• Understanding of GDPR, Qatar PDPPL, EU AI Act compliance.
• Proficiency in GRC tools and evidence‑collection processes.