Compliance Specialist

The Opportunity

Key Responsibilities

• Own and maintain Core42's Unified Control Framework (UCF), the harmonized control baseline that operationalizes the Enterprise Governance Framework (EGF) and unifies Integrated Management System (IMS) controls.
• Derive control requirements from EGF governance goals and objectives and organize them into unified control domains and sub-domains through systematic decomposition and normalization.
• Map and harmonize requirements across all in-scope standards and regulations to eliminate duplicated controls and enable a test once, comply many approach to audits and certifications.
• Maintain the UCF control register (control title, domain, sub-domain, control owner, risk owner, KCI, maturity and status) and ensure every control has an accountable owner.
• Define Key Control Indicators (KCIs) and KPIs with control owners, and measure control effectiveness and maturity.
• Assess controls against the UCF and its KCIs; record identified gaps, maturity deficiencies and areas of improvement, and track remediation to closure.
• Integrate the UCF with enterprise risk management and the Enterprise Risk & Control Register, linking each control to its risks and risk owners.
• Report control performance, trends and deviations to leadership, and feed insights back into the EGF to drive continuous improvement.

Required Skills & Qualifications

• Bachelor's degree in information technology, Engineering, Environmental Science, or a related discipline.
• 6 to 10 years of experience in information security, data centre, cloud audits and certifications.
• Strong understanding of security frameworks and standards (e.g., NIST) and their application in risk assessments.
• Experience with compliance frameworks (ISO 27001, SOC 2) and regulatory requirements.
• Familiarity with cloud security best practices and platforms (AWS, Azure).
• Hands-on experience designing or maintaining a unified control framework, including control rationalization and cross-framework mapping.
• Experience using GRC platforms to manage control libraries, framework mappings, control testing and evidence.
• Understanding of enterprise IT infrastructure, networking, Cloud and systems architecture.
• Knowledge and experience performing assurance and audits on Red Hat OpenStack- and OpenShift-based cloud platforms.
• Expertise in security frameworks such as ISO 27001, NIST, SOC 2, DORA, FIPS, plus encryption, firewalls, access controls, identity management and incident response.
• Advanced knowledge of business continuity planning, disaster recovery and implementing a BCMS as per ISO 22301.
• Expertise in control design, normalization and cross-framework mapping, KCI and KPI definition, control testing and maturity assessment, with working knowledge of COSO Internal Control and COBIT 2019.

Preferred Skills & Qualifications

• Preferred certifications: ISO 27001/22301/31000 Lead Auditor/Implementor, CISA, CISM, CRISC, CGEIT, PMP.
• Knowledge of current trends in AI and HPC, including emerging technologies and industry applications.
• Strong skills in coordinating with cross-functional teams and managing vendor relationships.
• Excellent communication skills for working with IT, engineering teams and other stakeholders to align data centre operations with organizational goals.

What Working At Core42 Offers

• Competitive salary package based on skills and experience.
• Performance-based annual bonus.
• Exclusive discount cards with Esaad and Fazaa.
• Premium family insurance including dental, vision and life insurance.
• Access to top-tier learning platforms with unlimited premium courses.

About Core42