The posting
Job Description
About DAMAC AI
DAMAC AI is the AI infrastructure arm of the DAMAC Group, delivering next-generation AI compute, sovereign cloud services, and hyperscale data center capacity across the Middle East and Asia.
We operate large-scale NVIDIA GPU clusters that power enterprise AI training, inference, and managed services for regional and global customers. As we continue to expand our AI infrastructure and sovereign cloud footprint, we are seeking an experienced Compliance Manager to lead and mature our compliance and certification programs across international, regional, and industry-specific frameworks.
The Role
As the Compliance Manager, you will own DAMAC AI's compliance program end-to-end, ensuring the organization remains continuously audit-ready while meeting evolving customer, regulatory, and industry requirements.
You will lead certification initiatives, oversee control implementation and testing, manage customer assurance activities, and partner closely with Security, Legal, Governance, Operations, and Engineering teams supporting our cloud, GPU, and data center environments.
This is a highly visible role requiring strong expertise in audit management, risk and compliance frameworks, customer assurance, and cloud security governance.
Key Responsibilities
Certification & Audit Management
- Lead certification and recertification programs for: ISO 27001 ISO 27017 ISO 27018 ISO 22301 SOC 2 Type II
- Drive readiness initiatives for: PCI DSS HIPAA CSA STAR Regional regulatory frameworks and government standards.
- Manage the full audit lifecycle, including: Scope definition Gap assessments Evidence collection Auditor engagement Fieldwork coordination Remediation management Certification completion
- Serve as the primary point of contact for certification bodies, auditors, and assessors.
Control Implementation & Compliance Testing
- Translate compliance requirements into practical and measurable operational controls.
- Design and manage control testing and effectiveness assessment programs.
- Establish evidence collection standards and audit-ready documentation processes.
- Track control ownership, testing schedules, exceptions, and remediation activities.
- Maintain a unified control framework mapping across multiple standards and regulations.
- Drive continuous improvement of control maturity across the business.
Customer & Regulatory Assurance
- Manage customer compliance and security due-diligence requests.
- Respond to RFPs, security questionnaires, and compliance assessments.
- Develop and maintain customer trust materials, including: Compliance reports ISO certificates SOC reports Penetration testing summaries Security whitepapers
- Support customer audits, site visits, and regulatory inspections.
- Monitor applicable compliance obligations across: UAE Saudi Arabia APAC ASEAN EMEA Other operating jurisdictions
Continuous Compliance & Governance
- Implement and manage continuous compliance platforms such as: Drata Vanta Anecdotes ServiceNow GRC Archer
- Automate evidence collection and compliance monitoring wherever possible.
- Monitor compliance posture and control effectiveness across cloud and infrastructure environments.
- Develop executive and management dashboards reporting compliance status and risk exposure.
- Drive organization-wide compliance awareness and training initiatives.
Vendor & Third-Party Risk Management
- Own third-party risk and supplier compliance programs.
- Assess critical vendors, OEMs, cloud providers, and sub-processors.
- Review: SOC reports ISO certifications Data Processing Agreements (DPAs) Security assessments
- Track remediation activities and ensure vendor compliance obligations are maintained.
Required Qualifications
Experience
- Minimum 8 years of experience in Information Security, IT Compliance, Risk Management, Governance, or related disciplines.
- At least 3 years of direct experience managing certification and audit programs.
- Proven experience leading compliance initiatives within: Cloud service providers Data center operators Technology organizations Managed service providers
Framework Expertise
Deep working knowledge of:
- ISO 27001
- SOC 2 Type II
Strong familiarity with:
- PCI DSS
- HIPAA
- GDPR
- CSA STAR
- Regional cybersecurity and cloud compliance frameworks
Audit & Controls
- Proven track record leading certification audits from planning through final report issuance.
- Hands-on experience with: Control design Control implementation Evidence management Internal testing Audit remediation
- Strong understanding of cloud, infrastructure, and platform control environments.
Tools & Platforms
Experience with governance, risk, and compliance tools, including:
- Drata
- Vanta
- Anecdotes
- ServiceNow GRC
- RSA Archer
- Similar enterprise GRC platforms
Communication
- Exceptional written and verbal English communication skills.
- Comfortable engaging with: Executive leadership External auditors Regulatory bodies Enterprise customers Technical stakeholders
Education
- Bachelor's degree in: Information Security Information Technology Business Law Risk Management Related discipline
Equivalent practical experience will also be considered.
Preferred Qualifications
Professional Certifications
One or more of the following:
- ISO 27001 Lead Auditor
- ISO 27001 Lead Implementer
- CISA
- CRISC
- CIPP/E
- CIPM
Industry Experience
- Experience within: Sovereign cloud environments Hyperscale cloud providers Telecommunications operators Financial services Healthcare Government-regulated sectors
Specialized Expertise
- Knowledge of data sovereignty and residency requirements.
- Experience managing cross-border data transfer compliance obligations.
- Understanding of AI governance and emerging AI regulations.
AI & Emerging Technology Compliance
Exposure to:
- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- Responsible AI governance programs
- AI-specific regulatory and compliance requirements
What Success Looks Like
- Successful achievement and maintenance of key industry certifications.
- A fully operational and continuously monitored compliance program.
- Consistent audit readiness across all business functions.
- Increased customer confidence through strong assurance practices.
- Effective management of regulatory obligations across multiple jurisdictions.
- Improved compliance automation, reduced audit effort, and enhanced control maturity.
Why Join DAMAC AI?
Join one of the region's most ambitious AI infrastructure organizations and play a critical role in building a world-class compliance program that supports sovereign cloud services, hyperscale AI platforms, and next-generation GPU infrastructure across the Middle East and Asia.
