Compliance Officer

Location: India

Job Description

About DAMAC AI
DAMAC AI is the AI infrastructure arm of the DAMAC Group, delivering next-generation AI compute, sovereign cloud services, and hyperscale data center capacity across the Middle East and Asia.
We operate large-scale NVIDIA GPU clusters that power enterprise AI training, inference, and managed services for regional and global customers. As we continue to expand our AI infrastructure and sovereign cloud footprint, we are seeking an experienced Compliance Manager to lead and mature our compliance and certification programs across international, regional, and industry-specific frameworks.
The Role
As the Compliance Manager, you will own DAMAC AI's compliance program end-to-end, ensuring the organization remains continuously audit-ready while meeting evolving customer, regulatory, and industry requirements.
You will lead certification initiatives, oversee control implementation and testing, manage customer assurance activities, and partner closely with Security, Legal, Governance, Operations, and Engineering teams supporting our cloud, GPU, and data center environments.
This is a highly visible role requiring strong expertise in audit management, risk and compliance frameworks, customer assurance, and cloud security governance.
Key Responsibilities
Certification & Audit Management
Lead certification and recertification programs for: ISO 27001
ISO 27017
ISO 27018
ISO 22301
SOC 2 Type II

Drive readiness initiatives for: PCI DSS
HIPAA
CSA STAR
Regional regulatory frameworks and government standards.

Manage the full audit lifecycle, including: Scope definition
Gap assessments
Evidence collection
Auditor engagement
Fieldwork coordination
Remediation management
Certification completion

Serve as the primary point of contact for certification bodies, auditors, and assessors.

Control Implementation & Compliance Testing
Translate compliance requirements into practical and measurable operational controls.
Design and manage control testing and effectiveness assessment programs.
Establish evidence collection standards and audit-ready documentation processes.
Track control ownership, testing schedules, exceptions, and remediation activities.
Maintain a unified control framework mapping across multiple standards and regulations.
Drive continuous improvement of control maturity across the business.

Customer & Regulatory Assurance
Manage customer compliance and security due-diligence requests.
Respond to RFPs, security questionnaires, and compliance assessments.
Develop and maintain customer trust materials, including: Compliance reports
ISO certificates
SOC reports
Penetration testing summaries
Security whitepapers

Support customer audits, site visits, and regulatory inspections.
Monitor applicable compliance obligations across: UAE
Saudi Arabia
APAC
ASEAN
EMEA
Other operating jurisdictions

Continuous Compliance & Governance
Implement and manage continuous compliance platforms such as: Drata
Vanta
Anecdotes
ServiceNow GRC
Archer

Automate evidence collection and compliance monitoring wherever possible.
Monitor compliance posture and control effectiveness across cloud and infrastructure environments.
Develop executive and management dashboards reporting compliance status and risk exposure.
Drive organization-wide compliance awareness and training initiatives.

Vendor & Third-Party Risk Management
Own third-party risk and supplier compliance programs.
Assess critical vendors, OEMs, cloud providers, and sub-processors.
Review: SOC reports
ISO certifications
Data Processing Agreements (DPAs)
Security assessments

Track remediation activities and ensure vendor compliance obligations are maintained.

Required Qualifications
Experience
Minimum 8 years of experience in Information Security, IT Compliance, Risk Management, Governance, or related disciplines.
At least 3 years of direct experience managing certification and audit programs.
Proven experience leading compliance initiatives within: Cloud service providers
Data center operators
Technology organizations
Managed service providers

Framework Expertise
Deep working knowledge of:
ISO 27001
SOC 2 Type II

Strong familiarity with:
PCI DSS
HIPAA
GDPR
CSA STAR
Regional cybersecurity and cloud compliance frameworks

Audit & Controls
Proven track record leading certification audits from planning through final report issuance.
Hands-on experience with: Control design
Control implementation
Evidence management
Internal testing
Audit remediation

Strong understanding of cloud, infrastructure, and platform control environments.

Tools & Platforms
Experience with governance, risk, and compliance tools, including:
Drata
Vanta
Anecdotes
ServiceNow GRC
RSA Archer
Similar enterprise GRC platforms

Communication
Exceptional written and verbal English communication skills.
Comfortable engaging with: Executive leadership
External auditors
Regulatory bodies
Enterprise customers
Technical stakeholders

Education
Bachelor's degree in: Information Security
Information Technology
Business
Law
Risk Management
Related discipline

Equivalent practical experience will also be considered.
Preferred Qualifications
Professional Certifications
One or more of the following:
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CISA
CRISC
CIPP/E
CIPM

Industry Experience
Experience within: Sovereign cloud environments
Hyperscale cloud providers
Telecommunications operators
Financial services
Healthcare
Government-regulated sectors

Specialized Expertise
Knowledge of data sovereignty and residency requirements.
Experience managing cross-border data transfer compliance obligations.
Understanding of AI governance and emerging AI regulations.

AI & Emerging Technology Compliance
Exposure to:
NIST AI Risk Management Framework (AI RMF)
ISO 42001
Responsible AI governance programs
AI-specific regulatory and compliance requirements

What Success Looks Like
Successful achievement and maintenance of key industry certifications.
A fully operational and continuously monitored compliance program.
Consistent audit readiness across all business functions.
Increased customer confidence through strong assurance practices.
Effective management of regulatory obligations across multiple jurisdictions.
Improved compliance automation, reduced audit effort, and enhanced control maturity.

Why Join DAMAC AI?
Join one of the region's most ambitious AI infrastructure organizations and play a critical role in building a world-class compliance program that supports sovereign cloud services, hyperscale AI platforms, and next-generation GPU infrastructure across the Middle East and Asia.

Job Info
Job Identification
31314
Posting Date
11/04/2026
Degree Level
Bachelor's Degree
Job Schedule
Full time
Locations
India