AI Cloud Security Compliance Manager

Role Overview

Own the security compliance program for Bitdeer's AI Cloud business line, leading multi-framework certifications, AI governance implementation, customer compliance engagement, and evidence automation. This role requires both traditional cloud compliance expertise (SOC 2, ISO 27001) and emerging AI compliance frameworks (ISO 42001, NIST AI RMF, EU AI Act, IMDA AI Verify).

What You Will Do

Serve as Program Owner for AI Cloud's SOC 2 Type I/II and ISO/IEC 27001:2022 certifications, managing the end-to-end process from gap assessment through certification. Define audit scope covering GPU bare metal, virtualized GPU, AI Studio, model hosting, and other product modules.

Why It Might Be a Fit

8+ years in information security or IT audit, with at least 4 years in a GRC / compliance certification leadership role (not a supporting role) focused on cloud services (IaaS/PaaS) or data center business.

Requirements

• Bachelor's degree or higher in Computer Science, Information Security, Information Systems Audit, or a related field.
• 8+ years in information security or IT audit, with at least 4 years in a GRC / compliance certification leadership role (not a supporting role) focused on cloud services (IaaS/PaaS) or data center business.
• Demonstrated end-to-end ownership of at least 2 of the following frameworks from gap assessment through certification: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 42001, CSA STAR, PCI DSS, HIPAA.
• Familiar with GPU cloud, AI training/inference infrastructure, or equivalent high-performance computing (HPC) business background.
• Working knowledge of cloud-native technology stack: Kubernetes, KVM/QEMU virtualization, Linux systems, IAM (Okta / Keycloak), CSPM tools.
• Hands-on experience with at least one GRC platform: Vanta, Drata, Secureframe, OneTrust, or ServiceNow GRC.
• At least one of the following certifications: ISO 27001 Lead Auditor / Lead Implementer, CISA, CISSP, CCSK, CCSP.
• Professional fluency in both English and Mandarin Chinese — able to independently author policies and audit reports in both languages, engage international audit firms and overseas customers in English, and communicate strategically with Mandarin-native management in Chinese.

Benefits

• Attractive welfare benefits
• Developmental opportunities such as training and mentoring