Compliance Officer

About DAMAC AI DAMAC AI is the AI infrastructure arm of the DAMAC Group, delivering next-generation AI compute, sovereign cloud services, and hyperscale data center capacity across the Middle East and Asia. We operate large-scale NVIDIA GPU clusters that power enterprise AI training, inference, and managed services for regional and global customers. As we continue to expand our AI infrastructure and sovereign cloud footprint, we are seeking an experienced Compliance Manager to lead and mature our compliance and certification programs across international, regional, and industry-specific frameworks. The Role As the Compliance Manager, you will own DAMAC AI's compliance program end-to-end, ensuring the organization remains continuously audit-ready while meeting evolving customer, regulatory, and industry requirements. You will lead certification initiatives, oversee control implementation and testing, manage customer assurance activities, and partner closely with Security, Legal, Governance, Operations, and Engineering teams supporting our cloud, GPU, and data center environments. This is a highly visible role requiring strong expertise in audit management, risk and compliance frameworks, customer assurance, and cloud security governance. Key Responsibilities Certification & Audit Management • Lead certification and recertification programs for: • ISO 27001 • ISO 27017 • ISO 27018 • ISO 22301 • SOC 2 Type II • Drive readiness initiatives for: • PCI DSS • HIPAA • CSA STAR • Regional regulatory frameworks and government standards. • Manage the full audit lifecycle, including: • Scope definition • Gap assessments • Evidence collection • Auditor engagement • Fieldwork coordination • Remediation management • Certification completion • Serve as the primary point of contact for certification bodies, auditors, and assessors. Control Implementation & Compliance Testing • Translate compliance requirements into practical and measurable operational controls. • Design and manage control testing and effectiveness assessment programs. • Establish evidence collection standards and audit-ready documentation processes. • Track control ownership, testing schedules, exceptions, and remediation activities. • Maintain a unified control framework mapping across multiple standards and regulations. • Drive continuous improvement of control maturity across the business. Customer & Regulatory Assurance • Manage customer compliance and security due-diligence requests. • Respond to RFPs, security questionnaires, and compliance assessments. • Develop and maintain customer trust materials, including: • Compliance reports • ISO certificates • SOC reports • Penetration testing summaries • Security whitepapers • Support customer audits, site visits, and regulatory inspections. • Monitor applicable compliance obligations across: • UAE • Saudi Arabia • APAC • ASEAN • EMEA • Other operating jurisdictions Continuous Compliance & Governance • Implement and manage continuous compliance platforms such as: • Drata • Vanta • Anecdotes • ServiceNow GRC • Archer • Automate evidence collection and compliance monitoring wh

Lead certification and recertification programs for ISO 27001, ISO 27017, ISO 27018, ISO 22301, SOC 2 Type II; Drive readiness initiatives for PCI DSS, HIPAA, CSA STAR, and regional/regulatory frameworks; Manage full audit lifecycle including scope definition, gap assessments, evidence collection, auditor engagement, fieldwork coordination, remediation, and certification completion; Serve as primary point of contact for certification bodies, auditors, and assessors; Translate compliance requirements into actionable controls; Design and manage control testing and effectiveness assessment programs; Establish evidence collection standards and audit-ready documentation processes; Track control ownership, testing schedules, exceptions, and remediation activities; Maintain a unified control framework mapping across standards/regulations; Drive continuous improvement of control maturity; Manage customer compliance and security due-diligence requests; Respond to RFPs, security questionnaires, and compliance assessments; Develop and maintain customer trust materials (Compliance reports, ISO certificates, SOC reports, penetration testing summaries, security whitepapers); Support customer audits, site visits, and regulatory inspections; Monitor applicable obligations across UAE, Saudi Arabia, APAC, ASEAN, EMEA, and other jurisdictions; Implement and manage continuous compliance platforms such as Drata, Vanta, Anecdotes, ServiceNow GRC, Archer; Automate evidence collection and compliance monitoring