Governance, Risk and Compliance (GRC) Lead

About the role

Datamaze is looking for a Compliance Lead to ensure its products comply with global data protection, privacy laws and AI/ML regulations. The role works closely with cross-functional teams to embed compliance frameworks into product design and development, mitigate risks and apply privacy-by-design principles. It is based in Hyderabad, India or Dubai, UAE, on a full-time basis.

Key responsibilities

• Analyze global data protection and privacy laws (e.g. GDPR, CCPA, HIPAA, AI Act) and their implications for AI, ML and data science products
• Work with product teams to build compliance frameworks into the product development lifecycle
• Conduct compliance risk assessments for products and features
• Develop and maintain compliance policies, processes and standards for data handling and AI/ML solutions
• Help engineers embed privacy-by-design principles into product architecture
• Run regular audits of product features and processes
• Train and guide teams on compliance requirements, data protection and AI ethics
• Maintain documentation of compliance processes, findings and decisions
• Act as liaison between legal, engineering and product teams

Required profile

• Bachelor's degree in Computer Science, Data Science, Cybersecurity, Law or a related field, or equivalent experience
• 3-5 years of experience in a compliance, data protection or privacy engineering role, ideally with AI/ML and data science products
• Hands-on experience integrating compliance frameworks into product development and conducting risk assessments for technology products
• Strong analytical and problem-solving skills, clear communication, teamwork and attention to detail

Required skills

• Understanding of GDPR, CCPA, HIPAA and the EU AI Act
• Familiarity with AI/ML concepts and tools, and privacy engineering practices such as data minimization, pseudonymization and differential privacy
• Cloud platform knowledge (AWS, Azure or GCP) and its compliance tools
• Basic programming or scripting (e.g. Python, Java) is a plus
• Proficiency with compliance tools such as OneTrust or TrustArc is a plus