Compliance Officer

About DAMAC AI

DAMAC AI is the AI infrastructure arm of the DAMAC Group, delivering next-generation AI compute, sovereign cloud services, and hyperscale data center capacity across the Middle East and Asia.

We operate large-scale NVIDIA GPU clusters that power enterprise AI training, inference, and managed services for regional and global customers. As we continue to expand our AI infrastructure and sovereign cloud footprint, we are seeking an experienced Compliance Manager to lead and mature our compliance and certification programs across international, regional, and industry-specific frameworks.

The Role

As the Compliance Manager, you will own DAMAC AI's compliance program end-to-end, ensuring the organization remains continuously audit-ready while meeting evolving customer, regulatory, and industry requirements.

You will lead certification initiatives, oversee control implementation and testing, manage customer assurance activities, and partner closely with Security, Legal, Governance, Operations, and Engineering teams supporting our cloud, GPU, and data center environments.

This is a highly visible role requiring strong expertise in audit management, risk and compliance frameworks, customer assurance, and cloud security governance.

Key Responsibilities

Certification & Audit Management

• Lead certification and recertification programs for:
  • ISO 27001
  • ISO 27017
  • ISO 27018
  • ISO 22301
  • SOC 2 Type II
• Drive readiness initiatives for:
  • PCI DSS
  • HIPAA
  • CSA STAR
  • Regional regulatory frameworks and government standards.
• Manage the full audit lifecycle, including:
  • Scope definition
  • Gap assessments
  • Evidence collection
  • Auditor engagement
  • Fieldwork coordination
  • Remediation management
  • Certification completion
• Serve as the primary point of contact for certification bodies, auditors, and assessors.

Control Implementation & Compliance Testing

• Translate compliance requirements into practical and measurable operational controls.
• Design and manage control testing and effectiveness assessment programs.
• Establish evidence collection standards and audit-ready documentation processes.
• Track control ownership, testing schedules, exceptions, and remediation activities.
• Maintain a unified control framework mapping across multiple standards and regulations.
• Drive continuous improvement of control maturity across the business.

Customer & Regulatory Assurance

• Manage customer compliance and security due-diligence requests.
• Respond to RFPs, security questionnaires, and compliance assessments.
• Develop and maintain customer trust materials, including:
  • Compliance reports
  • ISO certificates
  • SOC reports
  • Penetration testing summaries
  • Security whitepapers
• Support customer audits, site visits, and regulatory inspections.
• Monitor applicable compliance obligations across:
  • UAE
  • Saudi Arabia
  • APAC
  • ASEAN
  • EMEA
  • Other operating jurisdictions

Continuous Compliance & Governance

• Implement and manage continuous compliance platforms such as:
  • Drata
  • Vanta
  • Anecdotes
  • ServiceNow GRC
  • Archer
• Automate evidence collection and compliance monitoring wherever possible.
• Monitor compliance posture and control effectiveness across cloud and infrastructure environments.
• Develop executive and management dashboards reporting compliance status and risk exposure.
• Drive organization-wide compliance awareness and training initiatives.

Vendor & Third-Party Risk Management

• Own third-party risk and supplier compliance programs.
• Assess critical vendors, OEMs, cloud providers, and sub-processors.
• Review:
  • SOC reports
  • ISO certifications
  • Data Processing Agreements (DPAs)
  • Security assessments
• Track remediation activities and ensure vendor compliance obligations are maintained.

Required Qualifications

Experience

• Minimum 8 years of experience in Information Security, IT Compliance, Risk Management, Governance, or related disciplines.
• At least 3 years of direct experience managing certification and audit programs.
• Proven experience leading compliance initiatives within:
  • Cloud service providers
  • Data center operators
  • Technology organizations
  • Managed service providers

Framework Expertise

Deep working knowledge of:

• ISO 27001
• SOC 2 Type II

Strong familiarity with:

• PCI DSS
• HIPAA
• GDPR
• CSA STAR
• Regional cybersecurity and cloud compliance frameworks

Audit & Controls

• Proven track record leading certification audits from planning through final report issuance.
• Hands-on experience with:
  • Control design
  • Control implementation
  • Evidence management
  • Internal testing
  • Audit remediation
• Strong understanding of cloud, infrastructure, and platform control environments.

Tools & Platforms

Experience with governance, risk, and compliance tools, including:

• Drata
• Vanta
• Anecdotes
• ServiceNow GRC
• RSA Archer
• Similar enterprise GRC platforms

Communication

• Exceptional written and verbal English communication skills.
• Comfortable engaging with:
  • Executive leadership
  • External auditors
  • Regulatory bodies
  • Enterprise customers
  • Technical stakeholders

Education

• Bachelor's degree in:
  • Information Security
  • Information Technology
  • Business
  • Law
  • Risk Management
  • Related discipline

Equivalent practical experience will also be considered.

Preferred Qualifications

Professional Certifications

One or more of the following:

• ISO 27001 Lead Auditor
• ISO 27001 Lead Implementer
• CISA
• CRISC
• CIPP/E
• CIPM

Industry Experience

• Experience within:
  • Sovereign cloud environments
  • Hyperscale cloud providers
  • Telecommunications operators
  • Financial services
  • Healthcare
  • Government-regulated sectors

Specialized Expertise

• Knowledge of data sovereignty and residency requirements.
• Experience managing cross-border data transfer compliance obligations.
• Understanding of AI governance and emerging AI regulations.

AI & Emerging Technology Compliance

Exposure to:

• NIST AI Risk Management Framework (AI RMF)
• ISO 42001
• Responsible AI governance programs
• AI-specific regulatory and compliance requirements

What Success Looks Like

• Successful achievement and maintenance of key industry certifications.
• A fully operational and continuously monitored compliance program.
• Consistent audit readiness across all business functions.
• Increased customer confidence through strong assurance practices.
• Effective management of regulatory obligations across multiple jurisdictions.
• Improved compliance automation, reduced audit effort, and enhanced control maturity.

Why Join DAMAC AI?

Join one of the region's most ambitious AI infrastructure organizations and play a critical role in building a world-class compliance program that supports sovereign cloud services, hyperscale AI platforms, and next-generation GPU infrastructure across the Middle East and Asia.