GRC Security Expert
Core
Define, establish, and implement organizational information security processes to meet business, regulatory, legislative, and contractual requirements; manage ISMS audits, risk assessments, and compliance monitoring for ISO/IEC 27001 and PCI DSS.
Role type
GRC Security Expert (Senior IC)
Builds
Organizational information security frameworks, audit readiness, and risk mitigation strategies for a global gaming technology company.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC) within the regulated online gambling and gaming industry.
Deliverable
Production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security governance, risk assessment, compliance monitoring, audit management (ISO 27001, PCI DSS), policy development, third-party due diligence, project management, regulatory analysis.
Preferred skills
SaaS/Online Gambling industry experience, IT infrastructure knowledge, technical software development background.
Technologies
ISO/IEC 27001, PCI DSS, SOC/ISAE402 frameworks.
Responsibilities
Manage internal and external ISMS audit processes; coordinate security audits and remediation plans; identify and assess information security risks; develop security awareness training programs; manage security requirements with third parties; develop and maintain security policies and procedures.
Seniority
Senior, hands-on IC with management responsibilities.
