Governance, Risk, and Compliance (GRC) Lead

DATAMAZE . AI; Dubai; On-site; AED 300,000 - 500,000; Full time

Job summary

Datamaze seeks a Compliance Lead to ensure products meet global data protection, privacy laws, and AI/ML regulations. You will collaborate with cross‑functional teams to embed privacy-by-design to product development and mitigate regulatory risks.

The role involves policy development, audits, and training across data protection, AI ethics, and regulatory requirements, bridging technology with law to deliver secure, compliant solutions.

Qualifications

• Degree in CS, Data Science, Cybersecurity, Law, or related field.
• 3–5 years in compliance or privacy engineering.
• Hands-on with AI/ML data products.

Responsibilities

• Analyze global data protection and privacy laws (GDPR/CCPA/HIPAA/ AI Act).
• Integrate compliance frameworks into product development lifecycle.
• Conduct compliance risk assessments for products.
• Develop and maintain compliance policies and standards for data handling.
• Embed privacy-by-design in product architecture.
• Perform audits of product features for ongoing compliance.
• Provide training on data protection and AI ethics.
• Document compliance processes and decisions.
• Coordinate with legal, engineering, and product teams.

Skills

GDPR knowledge

AI/ML compliance

Privacy engineering

Risk assessment

Regulatory research

Education

Bachelor's degree in CS/DS/Cybersecurity/Law

Tools

OneTrust

TrustArc

Job description

About the Role

We are looking for a Compliance Lead to ensure our products comply with global data protection, privacy laws, and AI/ML regulations. You will work closely with cross‑functional teams to integrate compliance frameworks into product design and development, mitigating risks and embedding privacy‑by‑design principles. This role is ideal for someone passionate about bridging technology and regulatory requirements to deliver secure and compliant solutions.

Location: Hyderabad, India / Dubai, UAE

Employment type: Full‑time

Key Responsibilities

• Regulatory Analysis: Review and interpret global data protection and privacy laws (e.g., GDPR, CCPA, HIPAA, AI Act) and their implications for AI, ML, and data science products.
• Compliance Integration: Collaborate with product teams to design and implement compliance frameworks into the product development lifecycle.
• Risk Assessment: Conduct compliance risk assessments for products and features, identifying areas that require mitigation or redesign.
• Policy Development: Develop and maintain compliance policies, processes, and standards for handling data and building AI/ML‑driven solutions.
• Privacy Engineering: Work with engineers to embed privacy‑by‑design principles into product architecture and ensure compliance with applicable laws.
• Audits and Reviews: Conduct regular audits of product features and processes to ensure ongoing compliance with global regulations.
• Training and Guidance: Provide guidance and training to cross‑functional teams on compliance requirements and best practices for data protection and AI ethics.
• Documentation: Create and maintain comprehensive documentation of compliance processes, findings, and product‑related decisions.
• Stakeholder Collaboration: Act as a liaison between legal, engineering, and product teams to ensure alignment on compliance goals and initiatives.

Qualifications

Education: Bachelor’s degree in Computer Science, Data Science, Cybersecurity, Law, or a related field (or equivalent experience).

Technical Skills:

• Understanding of global data protection laws such as GDPR, CCPA, and HIPAA, as well as AI‑specific regulations like the EU AI Act.
• Familiarity with AI/ML concepts, tools, and platforms, and their implications for compliance.
• Experience in privacy engineering practices such as data minimization, pseudonymization, and differential privacy.
• Proficiency in tools for compliance and risk management (e.g., OneTrust, TrustArc) is a plus.
• Basic programming or scripting skills (e.g., Python, Java) to assess technical implementation of compliance requirements.
• Knowledge of cloud platforms (AWS, Azure, or GCP) and their compliance tools.

Experience

• 3–5 years of experience in a compliance, data protection, or privacy engineering role, ideally involving AI/ML and data science products.
• Hands‑on experience integrating compliance frameworks into product development processes.
• Familiarity with conducting risk assessments for technology products.

Soft Skills

• Strong analytical and problem‑solving abilities.
• Excellent verbal and written communication skills, with the ability to translate complex legal requirements into actionable product strategies.
• Ability to work collaboratively across diverse teams.
• Detail‑oriented and organized, with the ability to manage multiple priorities.

About the Company

Datamaze is a dynamic company specializing in AI, Data, and Analytics consulting services. We are dedicated to transforming businesses by leveraging the power of data and artificial intelligence. With a team of industry experts in technology, business strategy, and data science, Datamaze offers a range of services including data strategy development, AI model creation, advanced analytics, and data visualization. Our approach is client‑centric, focusing on creating customized solutions that address unique business challenges and objectives. The team, comprising data scientists, AI experts, strategists, and engineers, is committed to continuous learning and innovation. Datamaze positions itself as a trusted partner for businesses looking to navigate the complex data and AI landscape, aiming to optimize operations, inform decision‑making, and maintain a competitive edge.