Compliance Specialist

About Us

Core42, a leader in AI-powered cloud and digital infrastructure, is driving transformative technology solutions globally. Leveraging advanced resources and partnerships, Core42 empowers clients to harness sovereign AI infrastructure, especially in sectors with stringent regulatory needs. With a mission to redefine digital transformation, we combine sovereign capabilities with scalable, high-performance compute infrastructure, positioning itself at the forefront of AI innovation in the Middle East and beyond.

The opportunity

We are looking for a detail-oriented and proactive Compliance and Certification Specialist to own and manage Core42’s Unified Control Framework (UCF), the single, harmonized control baseline that operationalizes the Enterprise Governance Framework (EGF). The role also manages multi-standard compliance programs, ensures audit readiness and drives continuous improvement across IT service management, privacy, business continuity, quality, information security, cloud security and QHSE. The ideal candidate will be proficient in ISO standards (27001, 22301, 31000, 20000-1, 9001, 14001, 45001, 27017, 27018, 27701, 38500, 42001), SOC 2 Type 1 & Type 2, CSA STAR Level 2, PCI-DSS v4.0.1, GDPR and HIPAA, and regulatory frameworks including NIST SP 800-53, UAE IA (NESA), DESC ISR v3, NCEMA 7000 and FIPS 140-3. Familiarity with internal controls, business continuity management, cloud compliance, data centre governance and physical security is required. This role includes maintaining UCF control mappings and Key Control Indicators (KCIs), leading internal and external audits, policy management, stakeholder training, and risk-based planning to ensure enterprise-wide compliance and resilience.

Your key responsibilities

Focus areas: Unified Control Framework (UCF) Management; Control Effectiveness & KCI Monitoring; GRC Tool Automation; Regulatory & Industry Standards Alignment; Audit Readiness & Execution; Policy & Control Evaluation; Information and Cyber Security; Business continuity; Data Privacy; Certification Management; Vendor Management; Project Management; Cloud Security; Cross-Functional Collaboration.

• Own and maintain Core42’s Unified Control Framework (UCF), the single, harmonized control baseline that operationalizes the Enterprise Governance Framework (EGF) and unifies Integrated Management System (IMS) controls.
• Derive control requirements from EGF governance goals and objectives and organize them into unified control domains and sub-domains through systematic decomposition and normalization.
• Map and harmonize requirements across all in-scope standards and regulations to eliminate duplicated controls and enable a “test once, comply many” approach to audits and certifications.
• Maintain the UCF control register (control title, domain, sub-domain, control owner, risk owner, KCI, maturity and status) and ensure every control has an accountable owner.
• Define Key Control Indicators (KCIs) and KPIs with control owners, and measure control effectiveness and maturity.
• Assess controls against the UCF and its KCIs; record identified gaps, maturity deficiencies and areas of improvement, and track remediation to closure.
• Integrate the UCF with enterprise risk management and the Enterprise Risk & Control Register, linking each control to its risks and risk owners.
• Report control performance, trends and deviations to leadership, and feed insights back into the EGF to drive continuous improvement.

What we’re looking for

(a) Required skills / qualifications

• Bachelor’s degree in information technology, Engineering, Environmental Science, or a related discipline.
• 6 to 10 years of experience in information security, Data centre, Cloud audits and certifications
• Strong understanding of security frameworks and standards (e.g., NIST) and their application in risk assessments.
• Experience with compliance frameworks (ISO 27001, SOC 2) and regulatory requirements.
• Familiarity with cloud security best practices and platforms (AWS, Azure).
• Hands-on experience designing or maintaining a unified control framework, including control rationalization and cross-framework mapping (e.g., ISO 27001, NIST SP 800-53, SOC 2).
• Experience using GRC platforms to manage control libraries, framework mappings, control testing and evidence.
• Technology Infrastructure: understanding of enterprise IT infrastructure, networking, and Cloud, systems architecture
• Knowledge and experience in performing assurance and audits on Red Hat OpenStack- and OpenShift-based cloud platforms.
• Information Security (InfoSec): Expertise in security frameworks such as ISO 27001, NIST, SOC 2, DORA, FIPS, as well as advanced knowledge in encryption, firewalls, access controls, identity management, and incident response strategies.
• Cloud Platforms: Deep familiarity with cloud services (AWS, Azure, GCP) and their respective compliance standards (ISO 27017, 27018, SOC 2). Knowledge of cloud-native security tools, containerization (Docker, Kubernetes), and serverless architecture.
• Data Center Security: Understanding of Data Center Operations, physical security measures, environmental controls, and disaster recovery strategies.
• Business Continuity: Advanced knowledge of business continuity planning (BCP), disaster recovery (DR), and the implementation of BCMS as per ISO 22301.
• Control Framework Management: Expertise in control design, normalization and cross-framework mapping, KCI and KPI definition, control testing and maturity assessment, with working knowledge of COSO Internal Control and COBIT 2019.
• Governance Reporting: Ability to turn control data into clear dashboards and insights for leadership (e.g., Power BI, Excel).
• Project management skills and ability to coordinate cross-functional team & vendors
• Ability to work independently and under pressure while managing competing priorities.
• Proven track record of successfully managing certifications, audits, and compliance programs

(b) Preferred skills / qualifications

• Preferred certifications: ISO 27001/22301/31000 Lead Auditor/Implementor, CISA, CISM, CRISC, CGEIT, PMP.
• Knowledge of current trends in AI and HPC, including emerging technologies and industry applications.
• Strong skills in coordinating with cross-functional teams and managing vendor relationships.
• Excellent communication skills for working with IT, engineering teams, and other stakeholders to align data centre operations with organizational goals.

What working at Core42 offers

With a diverse team of 1,100+ employees from 68 nationalities, we foster an inclusive, innovative and collaborative environment. At Core42, we foster a culture grounded in trust, accountability and high performance. We are united by our values: Grit, where we overcome challenges with resilience and determination, Passion, which drives us to pursue excellence in everything we do, and Impact, as we aim to inspire progress and create meaningful change. Our team members thrive in an environment where each person’s contributions propel us forward, and together, we commit to achieving extraordinary results.

• Competitive Salary: We offer an attractive salary package based on your skills and experience
• Yearly Bonus: In recognition of your contributions, you will receive a performance-based annual bonus
• Exclusive Discount Cards: Access special benefits with Esaad and Fazaa cards, offering discounts across a wide range of services
• Premium Family Insurance: We provide comprehensive health coverage, including dental, vision and life insurance, ensuring the well-being of you and your family
• Learning & Development: We offer access to top-tier learning platforms to help you grow in your career. Learn at your own pace with unlimited access to premium courses.