Scale is at the forefront of powering artificial intelligence. We believe that trust in AI is earned with high-quality data for training, fine-tuning, and evaluating AI systems. Our products are transforming how organizations build and deploy AI. Our customers are the world’s most innovative model developers and enterprise and public sector entities looking to apply AI in their organizations and institutions.

We're looking for an Industrial Security Specialist who will play a vital role in supporting personnel security, physical security and program support. The ideal candidate brings strategic and operational experience, a security-first mindset, and a willingness to engage directly with customers, employees and stakeholders. If you're excited by ensuring the integrity and protection of national security, we invite you to apply.

This Industrial Security Specialist will report to the Industrial Security team with close collaboration with GRC, Workplace, and cross-functional teams to support the Public Sector security strategy for Scale. 

You will:

• Balance the timelines and requirements of US Government contracts while supporting Scale AI Public Sector efforts, accredited facilities, and sensitive R&D initiatives
• Assist in the development and execution of security education and awareness programs
• Conduct audits and inspections to ensure compliance with DoD and company policies
• Support all aspects of personnel security management in working directly with government partners to ensure compliance
• Initiate, review, and submit electronic background investigations to DCSA
• Responsible for mandatory USG reporting as it relates to our personnel, facility, and insider threat programs
• Assists in the protection of government, intellectual, third party and company information from unauthorized disclosures
• Conduct security briefings, debriefings, and annual refresher training for cleared employees
• Ensure frameworks are met for NISPOM, ICDs, SAPs, OPSEC, Insider Threat and continuous evaluation programs.
• Prepare, send, and receive visitor certifications
• Review performance work statements (PWS) or Statements of Work (SOW) for contracts and ensure properly executed DD Form 254s. 
• Coordinate incident response and reporting for security violations or concerns.

Ideally you'd have:

• Active U.S. DoD Top Secret, and willingness to obtain a TS/SCI
• Familiarity with USG information systems, such as DISS, NBIS, NISS, SWFT, e-App
• Experience assisting with the implementation and maintenance of a relevant industrial security program
• Must be able to support work 2-3 days a week from the office
• Knowledge of industrial security procedures (NISPOM, ICDs, other DoD/IC regulations and procedures)

Nice to haves:

• Excellent written and verbal communication- able to align with security strategy, IT and executive teams
• Adaptability and Learning Agility: Willingness to quickly grasp and apply new concepts and stay up-to-date with emerging trends in industrial security
• Willingness to work in a dynamic, high-growth company where speed, adaptability, and judgment are essential
• FSO Program Management for Possessing Facilities certification

Role Overview

This Security Specialist role will serve as a lead for cybersecurity awareness & training program responsible for the execution and continuous improvement of the firm’s cybersecurity awareness and training program across all Focus firms. This role serves as the primary owner for delivering engaging, effective, and risk‑based cybersecurity training to employees at all levels of the organization.

Reporting to the Head of Cybersecurity Governance, this individual‑contributor role works in close partnership with Legal, Privacy, Regulatory Compliance, HR, IT, and Security teams to ensure training content aligns with regulatory requirements, internal policies, and evolving cyber threats. The role plays a critical part in strengthening the firm’s security culture and reducing human‑driven cyber risk.

This role is hybrid with 3 days per week onsite in our St. Louis office

Key Responsibilities

Cybersecurity Awareness & Training Program Delivery

• Execute the firm‑wide cybersecurity awareness and training program across all Focus firms.
• Deliver mandatory annual security training, role‑based training, and targeted campaigns addressing key cyber risks (e.g., phishing, social engineering, data protection).
• Manage and execute phishing simulation programs, including campaign design, delivery, analysis, and follow‑up education.
• Coordinate training rollouts, schedules, and communications to ensure consistent adoption across diverse business units.

Content Development & Continuous Improvement

• Develop, maintain, and refresh cybersecurity training content to ensure relevance, clarity, and engagement.
• Tailor training materials for different audiences, including employees, advisors, leadership, and specialized roles.
• Incorporate lessons learned from incidents, phishing results, regulatory feedback, and emerging threat trends into training content.
• Balance regulatory requirements with practical, user‑friendly messaging that supports business productivity.

Regulatory, Legal & Compliance Partnership

• Work closely with Legal, Privacy, and Regulatory Compliance teams to ensure training content aligns with applicable laws, regulations, and contractual obligations.
• Support regulatory examinations, audits, and client due diligence efforts by providing training materials, metrics, and evidence.
• Maintain documentation demonstrating compliance with cybersecurity training and awareness requirements.
• Monitor regulatory expectations related to security awareness and adjust training accordingly.

Measurement, Reporting & Risk Reduction

• Define and track key training and awareness metrics (e.g., completion rates, phishing susceptibility, behavioral improvements).
• Analyze trends and results to identify risk areas and inform targeted training initiatives.
• Provide regular reporting and insights to the Head of Cybersecurity Governance and other stakeholders.
• Demonstrate the effectiveness of training programs in reducing human‑driven cyber risk.

Cross‑Functional Collaboration

• Partner closely with Cybersecurity Risk, Engineering, and Operations teams to align training with real‑world threats and controls.
• Coordinate with HR and Communications teams to support onboarding, policy acknowledgment, and change‑management initiatives.
• Serve as a trusted advisor to business teams on security awareness best practices.

Qualifications & Experience

• 5–8+ years of experience in cybersecurity awareness, training, GRC, or related security roles.
• Hands‑on experience delivering cybersecurity training programs in a regulated or complex environment.
• Strong understanding of common cybersecurity risks, user behavior factors, and awareness best practices.
• Experience partnering with Legal, Privacy, and Compliance teams on regulatory or audit‑driven initiatives.
• Excellent communication and content‑development skills, with the ability to explain security concepts to non‑technical audiences.
• Highly organized and self‑directed, with the ability to manage multiple initiatives across a distributed organization.

Preferred Qualifications

• Experience in financial services or similarly regulated industries.
• Familiarity with cybersecurity frameworks and regulatory requirements (e.g., NIST CSF, NYDFS, GLBA).
• Experience with phishing simulation and training platforms.
• Professional certifications such as CISSP, CISM, Security+, or relevant security awareness credentials

#LI-KJ2

This position is an exempt position. The annualized base pay range for this role is expected to be between $140,000–$160,000 base salary compensation range. Actual base pay may vary based on factors including, but not limited to, experience, subject matter expertise, geographic location where work will be performed, and the applicant’s skill set. The base pay is just one component of the total compensation package. Other rewards may include an annual cash bonus and a comprehensive benefits package, including but not limited to medical, dental, vision, life insurance, and 401(k). Please note that the job title is subject to change based on the selected candidate’s experience and education.

Position Summary 

Focus Financial Partners is seeking a proactive and detail-oriented Senior Risk Operations Specialist to support and strengthen our organization’s Cybersecurity program. This role is responsible for supporting key risk pillars: Vulnerability Management and Risk Management. A successful candidate will have knowledge of one or more of these areas and be able to assist with writing policy and process, supporting deployment of technology and handling incident response in a variety of environments. The candidate will also manage and maintain cybersecurity dashboards to track key performance indicators (KPIs) across all partner firms.

This role can be based in New York, NY / St Louis. MO / Remote

Primary Responsibilities

• Provide input into an evolving enterprise risk program, ensuring risks to data security are identified, quantified and documented.
• Develop and maintain information feeds for new and evolving vulnerabilities.
• Collaborate with other technical teams to assess vulnerability criticality and coordinate patch deployment. 
• Participate in audits and assessments to demonstrate compliance and remediate findings.
• Execute cybersecurity training and awareness programs across partner firms. 
• Develop and maintain real-time dashboards and reports to measure cybersecurity program effectiveness. Work across other cybersecurity functions to incorporate KPI data.
• Work with the Head of Cybersecurity Risk to establish and track KPIs such as incident response times, policy compliance rates, and training completion.
• Provide regular reports to leadership and stakeholders.
• Act as a liaison between IT, compliance, and external partners to ensure cohesive security practices.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience). Master’s preferred.
• 3-5 years of experience in cybersecurity, policy development, or GRC (governance, risk, and compliance).
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory environments in financial services.
• Excellent written and verbal communication skills.
• Industry certifications such as CISSP, CISM, or GIAC (GSEC, GCCC) are preferred.
• Prior experience in a multi-partner or financial services environment is preferred.
• Familiarity with privacy regulations such as GDPR or CCPA is preferred.
• Ability to manage multiple projects and stakeholders simultaneously.

About Focus Financial Partners

Focus is a leading partnership of fiduciary wealth management and related financial services firms. Focus provides access to best practices, greater resources, and continuity planning for its affiliated advisory firms, which serve individuals, families, employers, and institutions with comprehensive financial services. Focus firms and their clients benefit from the solutions, synergies, scale, economics, and best practices offered by Focus to achieve their business objectives. For more information about Focus, please visit www.focusfinancialpartners.com.

The annualized base pay range for this role is expected to be between $110,000-$130,000.  Actual base pay could vary based on factors including but not limited to experience, subject matter expertise, geographic location where work will be performed, and the applicant's skill set.  The base pay is just one component of the total compensation package for employees.  Other rewards may include an annual cash bonus and a comprehensive benefits package.

Position Summary

Focus Financial Partners is seeking a proactive and detail-oriented Senior Risk Operations Specialist to support and strengthen our organization’s Cybersecurity program. This role is responsible for supporting key risk pillars: Vulnerability Management and Risk Management. A successful candidate will have knowledge of one or more of these areas and be able to assist with writing policy and process, supporting deployment of technology and handling incident response in a variety of environments. The candidate will also manage and maintain cybersecurity dashboards to track key performance indicators (KPIs) across all partner firms.

This role can be based in St Louis. MO; Boston, MA.

Primary Responsibilities

• Provide input into an evolving enterprise risk program, ensuring risks to data security are identified, quantified and documented.
• Develop and maintain information feeds for new and evolving vulnerabilities.
• Collaborate with other technical teams to assess vulnerability criticality and coordinate patch deployment.
• Participate in audits and assessments to demonstrate compliance and remediate findings.
• Execute cybersecurity training and awareness programs across partner firms.
• Work with the Head of Cybersecurity Risk to establish and track KPIs such as incident response times, policy compliance rates, and training completion.
• Provide regular reports to leadership and stakeholders.
• Act as a liaison between IT, compliance, and external partners to ensure cohesive security practices.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience). Master’s preferred.
• 5+ years of experience in cybersecurity, policy development, or GRC (governance, risk, and compliance).
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory environments in financial services.
• Minimum of 5 years' experience with creating and maintaining real-time dashboards and reports to measure cybersecurity program effectiveness
• Excellent written and verbal communication skills.
• Industry certifications such as CISSP, CISM, or GIAC (GSEC, GCCC) are preferred.
• Prior experience in a multi-partner or financial services environment is preferred.
• Familiarity with privacy regulations such as GDPR or CCPA is preferred.
• Ability to manage multiple projects and stakeholders simultaneously.

This is an exempt position. The annualized base pay range for this role is expected to be between $100,000- $120,000.  Actual base pay could vary based on factors including but not limited to experience, subject matter expertise, geographic location where work will be performed, and the applicant's skill set.  The base pay is just one component of the total compensation package for employees.  Other rewards may include an annual cash bonus and a comprehensive benefits package, including but not limited to medical, dental, vision, life and 401(k). Please note that the job title is subject to change based on the selected candidate’s experience and education.