Scopely is looking for an Associate Lead, Regulatory Security Analyst to join our Enterprise Technology team in the United States, working on a remote basis.
At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues, or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily.
The IT/Ops team keeps everything behind the scenes running smoothly and we make sure all teams are equipped and connected - whether across the office or halfway around the world. AV struggles? Don’t worry, we’ve got this.
What You Will Do
The Associate Lead, Regulatory Compliance, is responsible for overseeing the continuous execution and monitoring of Scopely’s regulatory and national security compliance obligations within our rapidly expanding, global gaming environment.
This role focuses on regulatory program oversight, structured monitoring, and governance execution to ensure Scopely consistently meets its formal compliance commitments. This is achieved through structured oversight, continuous monitoring, and disciplined governance across all teams, systems, and vendors.
This role requires close partnership with the Security Officer, Legal, HR, IT, Product, and Data teams to maintain continuous compliance with all regulatory and national security commitments.
• Lead oversight of compliance with U.S. foreign investment and privacy regulations, advising internal teams and ensuring regulatory requirements are implemented consistently and effectively
• Monitor adherence to the NSA Cybersecurity Plan, privacy and related regulatory requirements, ensuring controls operate as designed and deviations are promptly addressed
• Oversee regulator-facing communications and required notifications, including non-objection submissions, storage and vendor updates, incident reporting within defined timelines, and annual compliance reporting
• Maintain and manage security compliance documentation, ensuring updates are accurate, timely, and regulator-ready
• Track and monitor role-based access controls for sensitive data, including onboarding/offboarding processes, privilege drift reviews, and third-party access
• Oversee security compliance training for relevant personnel
• Coordinate and support third-party assessments, regulatory reviews, and audit activities
• Maintain structured documentation and evidence repositories to ensure audit readiness at all times
• Identify gaps or process improvements and drive enhancements to strengthen governance and monitoring mechanisms
• Partner with IT and Engineering to ensure monitoring, logging, and segregation controls align with regulatory expectations
What We’re Looking For
• 6+ years of experience in cybersecurity governance, regulatory compliance, risk management, or related security oversight roles
• Experience supporting structured regulatory frameworks or government oversight programs
• Strong understanding of identity governance, role-based access controls, least privilege principles, and vendor risk oversight
• Experience managing regulatory reporting timelines and structured compliance documentation
• Experience managing annex-style documentation frameworks or formal regulatory filings
• Demonstrated ability to coordinate audits, assessments, and regulator-facing engagements
• Experience leveraging or building AI-enabled tools to enhance GRC processes, including developing AI assistants or automation workflows to improve regulatory monitoring, documentation, and control oversight.
• Strong written communication skills with the ability to draft clear, defensible regulatory communications
• Experience working cross-functionally with Legal, HR, Engineering, and Executive stakeholders
• Strong program management and organizational skills with attention to detail
• Ability to operate independently in a high-accountability environment
• Familiarity with NIST or ISO aligned cybersecurity control framework
Bonus Points
• Advanced degree or relevant certifications (CISSP, CISM, CRISC, etc.)
At Scopely, we create games for everyone - and want to ensure that the people behind our games reflect that! We are committed to creating a diverse, supportive work environment where everyone is treated with respect. We are committed to providing equal employment opportunities and welcome individuals from all backgrounds to join us & embrace the adventure!
This role will have access to sensitive and/or confidential employee or customer personally identifiable information (PII) and/or Company financial information, and therefore will be subject to background checks upon receiving a conditional offer of employment.
For candidates in CA, CO, NJ, NY, and WA, the annual salary range is provided below. In addition to base pay, employees may be eligible for equity, bonuses, and a comprehensive benefits package, including healthcare benefits, retirement benefits, pet insurance, paid holidays, paid Scopely free days, and unlimited paid time off. Base pay offered may vary depending on job-related knowledge, skills, and experience.
CA, CO, NJ, NY, and WA Annual Salary Range$145,000—$184,800 USD
About Scopely
Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play.
Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Niantic games businesses — Scopely consistently delivers experiences players love today and return to for years to come.
Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play.
Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: [Upgrade to PRO to see link]
Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @scopely.com.
Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact [Upgrade to PRO to see contact]. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice.
Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.