About DAMAC AI

DAMAC AI is the AI infrastructure arm of the DAMAC Group, delivering next-generation AI compute, sovereign cloud services, and hyperscale data center capacity across the Middle East and Asia.

We operate large-scale NVIDIA GPU clusters that power enterprise AI training, inference, and managed services for regional and global customers. As we continue to expand our AI infrastructure and sovereign cloud footprint, we are seeking an experienced Compliance Manager to lead and mature our compliance and certification programs across international, regional, and industry-specific frameworks.

The Role

As the Compliance Manager, you will own DAMAC AI's compliance program end-to-end, ensuring the organization remains continuously audit-ready while meeting evolving customer, regulatory, and industry requirements.

You will lead certification initiatives, oversee control implementation and testing, manage customer assurance activities, and partner closely with Security, Legal, Governance, Operations, and Engineering teams supporting our cloud, GPU, and data center environments.

This is a highly visible role requiring strong expertise in audit management, risk and compliance frameworks, customer assurance, and cloud security governance.

Key Responsibilities

Certification & Audit Management

- Lead certification and recertification programs for: ISO 27001ISO 27017ISO 27018ISO 22301SOC 2 Type II
- Drive readiness initiatives for: PCI DSSHIPAACSA STARRegional regulatory frameworks and government standards.
- Manage the full audit lifecycle, including: Scope definitionGap assessmentsEvidence collectionAuditor engagementFieldwork coordinationRemediation managementCertification completion
- Serve as the primary point of contact for certification bodies, auditors, and assessors.

Control Implementation & Compliance Testing

- Translate compliance requirements into practical and measurable operational controls.
- Design and manage control testing and effectiveness assessment programs.
- Establish evidence collection standards and audit-ready documentation processes.
- Track control ownership, testing schedules, exceptions, and remediation activities.
- Maintain a unified control framework mapping across multiple standards and regulations.
- Drive continuous improvement of control maturity across the business.

Customer & Regulatory Assurance





- Manage customer compliance and security due-diligence requests.
- Respond to RFPs, security questionnaires, and compliance assessments.
- Develop and maintain customer trust materials, including: Compliance reportsISO certificatesSOC reportsPenetration testing summariesSecurity whitepapers
- Support customer audits, site visits, and regulatory inspections.
- Monitor applicable compliance obligations across: UAESaudi ArabiaAPACASEANEMEAOther operating jurisdictions

Continuous Compliance & Governance

- Implement and manage continuous compliance platforms such as: DrataVantaAnecdotesService Now GRCArcher
- Automate evidence collection and compliance monitoring wherever possible.
- Monitor compliance posture and control effectiveness across cloud and infrastructure environments.
- Develop executive and management dashboards reporting compliance status and risk exposure.
- Drive organization-wide compliance awareness and training initiatives.

Vendor & Third-Party Risk Management

- Own third-party risk and supplier compliance programs.
- Assess critical vendors, OEMs, cloud providers, and sub-processors.
- Review: SOC reportsISO certificationsData Processing Agreements (DPAs)Security assessments
- Track remediation activities and ensure vendor compliance obligations are maintained.

Required Qualifications

Experience

- Minimum 8 years of experience in Information Security, IT Compliance, Risk Management, Governance, or related disciplines.
- At least 3 years of direct experience managing certification and audit programs.
- Proven experience leading compliance initiatives within: Cloud service providersData center operatorsTechnology organizationsManaged service providers

Framework Expertise

Deep working knowledge of:

- ISO 27001
- SOC 2 Type II

Solid familiarity with:

- PCI DSS
- HIPAA
- GDPR
- CSA STAR
- Regional cybersecurity and cloud compliance frameworks

Audit & Controls

- Proven track record leading certification audits from planning through final report issuance.




- Hands-on experience with: Control designControl implementationEvidence managementInternal testingAudit remediation
- Strong understanding of cloud, infrastructure, and platform control environments.

Tools & Platforms

Experience with governance, risk, and compliance tools, including:

- Drata
- Vanta
- Anecdotes
- Service Now GRC
- RSA Archer
- Similar enterprise GRC platforms

Communication

- Exceptional written and verbal English communication skills.
- Comfortable engaging with: Executive leadershipExternal auditorsRegulatory bodiesEnterprise customersTechnical stakeholders

Education

- Bachelor's degree in: Information SecurityInformation TechnologyBusinessLawRisk ManagementRelated discipline

Equivalent practical experience will also be considered.

Preferred Qualifications

Professional Certifications

One or more of the following:

- ISO 27001 Lead Auditor
- ISO 27001 Lead Implementer
- CISA
- CRISC
- CIPP/E
- CIPM

Industry Experience

- Experience within: Sovereign cloud environmentsHyperscale cloud providersTelecommunications operatorsFinancial servicesHealthcareGovernment-regulated sectors

Specialized Expertise

- Knowledge of data sovereignty and residency requirements.
- Experience managing cross-border data transfer compliance obligations.
- Understanding of AI governance and emerging AI regulations.

AI & Emerging Technology Compliance

Exposure to:

- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- Responsible AI governance programs
- AI-specific regulatory and compliance requirements

What Success Looks Like

- Successful achievement and maintenance of key industry certifications.
- A fully operational and continuously monitored compliance program.
- Consistent audit readiness across all business functions.
- Increased customer confidence through strong assurance practices.
- Effective management of regulatory obligations across multiple jurisdictions.
- Improved compliance automation, reduced audit effort, and enhanced control maturity.

Why Join DAMAC AI?

Join one of the region's most ambitious AI infrastructure organizations and play a critical role in building a world-class compliance program that supports sovereign cloud services, hyperscale AI platforms, and next-generation GPU infrastructure across the Middle East and Asia.

📌 Compliance Officer (India)
🏢 DAMAC Properties
📍 India