Vice President Compliance

LocationDubai, UAE — global travel as requiredReports ToSenior Vice President-Contracts and Commercial Risk ManagementFunctionCompliance, Ethics and Risk ManagementEmployment TypeFull-timeAbout the OrganisationThe XX develops, acquires, and operates large-scale data centre and digital infrastructure projects globally. Its business spans data centre platform development, land acquisition, construction, and operations, with a strategic focus on scaling the platform for institutional investment and leasing capacity across its data centre portfolio.Another entity - XY develops and operates AI infrastructure, GPU computing, cloud services, and AI technology platforms globally. Its focus is to build large-scale AI compute capacity and digital infrastructure that supports enterprise AI, cloud, and high-performance computing services.As the combined platform scales toward institutional capital, this role will be central to building an institutional-grade compliance function capable of supporting a globally operating group with the governance frameworks and compliance standards of a publicly listed company.Role SummaryThe Vice President, Compliance will design, implement, and lead the compliance program across XX and XY, spanning across the following core areas: regulatory compliance (AML and sanctions), compliance and ethics, data privacy management, operational compliance, export control, and enterprise risk management. The role carries direct accountability for compliance and governance of a listed company, including Sarbanes-Oxley (SOX) readiness, and for embedding a culture of compliance across a fast-growing, multi-jurisdictional data centre and AI infrastructure business.Key Responsibilities1. Regulatory Compliance — AML and SanctionsDesign and maintain an AML/CFT and sanctions compliance framework aligned with UAE and applicable international regulatory requirements.Own sanctions screening, KYC/KYB, and beneficial ownership verification for counterparties, investors, JV partners, and vendors.Monitor evolving sanctions regimes (OFAC, EU, UK, UN) relevant to cross-border data centre and AI infrastructure transactions.Lead investigations into suspicious activity and manage regulatory reporting obligations.2. Compliance and EthicsDevelop, maintain, and roll out the Code of Conduct, anti-bribery and corruption policy, conflicts of interest policy, and related ethics policies for the OrganisationBuild and run an ethics and compliance training program for employees, management, and the Board.Operate a confidential whistleblowing / speak-up channel and manage case intake, triage, and resolution.Track policy attestations and maintain an auditable compliance policy library.3. Data Privacy ManagementEstablish and maintain a global data privacy program covering personal data handling across data centre operations, cloud/AI platforms, and enterprise customers.Ensure alignment with applicable data protection regimes (e.g., UAE data protection law, GDPR, and relevant US state privacy laws) across the jurisdictions in which Organisation operate.Oversee data processing agreements, privacy impact assessments, and cross-border data transfer arrangements, particularly relevant to AI/cloud service offerings.Partner with IT/security teams on data governance, retention, and breach-response protocols.4. Operational ComplianceEmbed compliance requirements into day-to-day operations across construction, land acquisition, data centre operations, leasing, and AI/cloud service delivery.Maintain jurisdictional licensing, permitting, and regulatory registers across all operating markets (including the US, Finland, Thailand, Malaysia, and the UAE).Conduct periodic compliance audits and risk-based monitoring across business units and support functions.Coordinate with Legal, Tax, Finance, and Corporate Affairs to ensure compliance requirements are reflected in board resolutions, PoAs, and transaction documentation.5. Export ControlEstablish an export control compliance program covering hardware (GPUs, servers, networking equipment) and technology transfers relevant to AI infrastructure and data centre operations.Monitor applicable export control regimes (e.g., US EAR, ITAR-adjacent considerations for advanced compute hardware) and dual-use technology restrictions.Implement classification, licensing, and end-use/end-user screening processes for procurement and deployment of GPU and compute hardware.Advise the business on export control implications of new markets, customers, and hardware sourcing arrangements.6. Risk ManagementBuild and maintain an enterprise risk management framework covering regulatory, operational, financial, reputational, and geopolitical risk across the OrganisationMaintain a group-wide risk register with clear ownership, mitigation plans, and escalation thresholds.Report regularly to executive leadership, the Board, and relevant committees on compliance and risk posture.Establish, document, and maintain Sarbanes-Oxley (SOX) internal control frameworks and ensure ongoing compliance testing and documentation in coordination with Finance and external auditors, aligned with US publicly listed company standards.Key RelationshipsInternal: Executive Office, Legal, Finance/Tax, Corporate Affairs, Internal Audit & leadership.External: External counsel, auditors, regulators, fiduciary/corporate service providers, and institutional capital markets advisors.Candidate ProfileExperience18+ years of progressive leadership experience in compliance, risk, or legal roles within global, multi-jurisdictional organizations, with at least 5 years in a senior compliance leadership capacity (Head of Compliance, VP, or CCO) reporting to executive leadership or the Board.Proven track record with direct, hands-on experience in a company that has completed an IPO or listing on NASDAQ, NYSE, or another major exchange, with deep involvement in designing, implementing, and documenting compliance and SOX internal control frameworks required for listed company status.Deep, applied expertise designing, implementing, and testing SOX internal controls, including direct engagement with external auditors, audit committees, and Big Four advisory firms.Senior compliance experience gained within a capital-intensive, asset-heavy, or infrastructure-driven sector — data centres, AI/cloud infrastructure, telecommunications, energy, or large-scale real estate/infrastructure development strongly preferred.Track record building and leading compliance functions from an early stage of maturity, scaling programs, policies, and teams in step with rapid business growth and increasing regulatory scrutiny.Substantial cross-border experience across the Middle East, United States, Europe, and Southeast Asia, with fluency in managing AML/sanctions exposure, KYC, and beneficial ownership requirements across complex JV and cross-border transaction structures.Working knowledge of export control regimes governing advanced compute hardware (GPUs) and dual-use technology, with experience advising on licensing, classification, and end-use screening in a technology or infrastructure context.Established credibility engaging with regulators, external counsel, auditors, and institutional investors, and comfort operating as a trusted advisor to the CEO, Board, and Audit Committee on sensitive, high-stakes matters.Skills and CompetenciesAuthoritative command of AML, sanctions, data privacy, and export control frameworks, with the judgment to translate regulatory requirements into pragmatic, business-aligned controls.Demonstrated ability to build institutional-grade compliance infrastructure from the ground up within a rapidly scaling organization that operates under US publicly listed company standards and scrutiny, with exposure to sophisticated institutional investors, regulators, and audit committees.Board-level executive presence, with the gravitas and communication skill to advise the CEO, Board, and Audit Committee on complex, sensitive, and reputationally significant matters.Sophisticated stakeholder management across legal, finance, operations, and external advisors, with the ability to influence without direct authority.Sound commercial judgment and discretion, balancing regulatory rigor with the pace required of a high-growth, capital-markets-facing business.EducationBachelor's degree in Law, Finance, Business, or a related discipline required; an advanced degree (JD, MBA, or equivalent) is an advantage. Relevant professional certification (CAMS, CCEP, CIPP, or equivalent) strongly preferred.