Head of International Security (Cybersecurity)

TL;DR

Head of International Security (Cybersecurity): Leading international security strategy for AI products, enterprise software, and public-sector platforms with an accent on cloud security, regulatory compliance, and sovereign data protection. Focus on designing regional security controls, securing AI and agentic systems, strengthening detection and insider-risk programs, and partnering with international customers and governments.

Location: London, UK. The role requires the right to work in the UK, regular travel, and willingness to undergo country-specific security clearance vetting when required.

Company

Scale AI develops reliable AI systems, high-quality training data, and full-stack technologies for enterprises, governments, and leading AI model providers.

What you will do

• Execute the global secure-by-default security strategy across non-US markets and incorporate regional requirements into global architecture decisions.
• Translate GDPR, ISO 27001/27017/27018, SOC 2, UK Cyber Essentials Plus, NIS2, the EU AI Act, and sovereign-cloud requirements into engineering controls.
• Lead regional identity, access management, secrets management, CI/CD hardening, encryption, logging, monitoring, infrastructure protection, and threat detection.
• Secure international deployments, customer data, proprietary datasets, AI assets, multi-tenant systems, and agentic application workflows.
• Build insider-risk, contributor-integrity, auditability, privilege-governance, and behavioral anomaly-detection capabilities.
• Act as the security partner for international enterprise and public-sector customers, regulators, Sales, Legal, Compliance, and Engineering.

Requirements

• 8+ years of cybersecurity experience and at least 4 years leading or formally mentoring engineers.
• Demonstrated success building and scaling security programs that materially improved risk posture.
• Strong technical depth in AWS, GCP, or Azure security; IAM, Zero Trust, infrastructure security, logging, monitoring, and secure SDLC practices.
• Hands-on familiarity with GDPR, ISO 27001, SOC 2, UK Cyber Essentials Plus, NIS2, and the EU AI Act.
• Experience managing insider risk or securing environments with significant third-party, contractor, or marketplace-style populations.
• Right to work in the UK; comfortable with regular travel and security-clearance vetting where required.

Nice to have

• Experience securing AI/ML platforms, LLM systems, or agentic applications.
• Knowledge of AI-specific threats including training-data poisoning, prompt injection, tool abuse, and model-related IP protection.
• Experience with enterprise SaaS and government or national-security customers.
• Knowledge of GCC sovereign compliance and privacy regulations.
• Active or eligible UK SC/DV, NATO, or equivalent allied-jurisdiction clearance.

Culture & Benefits

• Work on security for frontier AI, enterprise, and national-security use cases.
• Collaborate across Engineering, Product, Legal, Compliance, Sales, and Public Sector functions.
• Help shape secure-by-design products and infrastructure across multiple regulatory environments.
• Inclusive and equal-opportunity workplace with reasonable accommodation support.

Hiring process

• Candidates may be subject to security-clearance vetting for specific customer engagements.
• Applicants may be reconsidered for the same role after a 90-day waiting period.