IT Governance, Risk and Compliance Manager

Overview

Welcome to the Games Global. Home to over 1,300 exclusive games, world-class studios, and a record-breaking progressive jackpot network. We are redefining igaming with a portfolio of 1,300+ exclusive games from some of the industry's most creative studios and a record-breaking progressive jackpot network. We empower operators to build unforgettable player experiences and level up their game.

We are looking for an IT Governance, Risk and Compliance Manager to lead and embed the company’s IT governance, risk and compliance framework, ensuring technology risks are identified, assessed and managed in line with regulatory obligations, business objectives and risk appetite. The role will act as the designated ISMS Manager for ISO 27001 and related audits, owning the achievement and ongoing maintenance of certification and the effective operation of the Information Security Management System.

The role will also serve as the principal governance, risk, compliance and assurance contact for the company’s technology provider, while providing independent oversight and practical guidance across information security, technology controls, AI, data governance, third-party risk and assurance.

Responsibilities

Develop, maintain and embed the IT governance, risk and compliance framework, policies, standards and supporting procedures. Lead the company’s ISO 27001 certification programme and maintain certification through effective operation and continual improvement of the Information Security Management System (ISMS). Act as the designated ISMS Manager, with day-to-day accountability for ISMS governance, coordination, performance monitoring, reporting and continual improvement in accordance with ISO 27001 requirements.

Maintain the ISMS scope, risk assessment methodology, Statement of Applicability, information security objectives, control framework, documented information and certification roadmap. Serve as the key point of contact for the company’s technology provider on IT governance, information security, risk, compliance and assurance matters, ensuring responsibilities, control expectations, evidence requirements and remediation actions are clearly defined and tracked.

Coordinate regular governance and assurance engagement with the technology provider, review service and control performance, challenge material risks or control gaps, and escalate unresolved matters through the appropriate governance forums. Maintain the technology risk register and facilitate risk assessments, control evaluations, treatment plans and formal risk acceptance.

Oversee the design and operating effectiveness of IT general controls and key technology controls, including access, change, operations, resilience and supplier controls. Coordinate assurance activities and evidence for internal and external audits, regulatory reviews, certifications and customer due diligence. Plan and coordinate ISO 27001 internal audits, management reviews, surveillance and recertification audits; manage non-conformities, corrective actions and continual improvement activities to completion.

Monitor compliance with applicable technology, information security, AI, privacy and data governance obligations, including relevant licence conditions and recognised standards. Provide pragmatic advice to Technology, Product, Security, Compliance and business teams on control requirements, risk mitigation and acceptable alternatives.

Assess technology and information security risks arising from new systems, AI, material change, outsourcing, cloud services and third parties. Track control deficiencies, audit findings and remediation actions, escalating overdue or material risks through the appropriate governance forums. Define and report meaningful risk and compliance metrics, trends and emerging issues to senior management and relevant committees.

Support technology incident governance, including impact assessment, lessons learned, corrective actions and regulatory input where required. Promote a strong risk and control culture through guidance, training and constructive challenge. Lead, coach and develop team members, set clear objectives and ensure timely, high-quality delivery.

Qualifications

Relevant degree or equivalent professional experience. ISO 27001 Lead Implementer or Lead Auditor certification is strongly preferred; certifications such as CISA, CISM, CRISC or CISSP are advantageous. Substantial experience in IT governance, technology risk, information security compliance, audit or a related control function within a regulated or complex organisation.

Strong working knowledge of ISO/IEC 27001 and practical experience of implementing, operating and continually improving an ISMS, including certification, surveillance and recertification audits. Experience acting as an ISMS Manager or in an equivalent role, with the confidence to coordinate control owners, senior stakeholders, auditors and external service providers.

Practical experience of IT general controls, risk and control self-assessments, control testing, audit management and remediation tracking. Experience assessing cloud, third-party, cybersecurity, resilience, change and data-related risks. Demonstrable experience of technology provider governance, including oversight of contractual control obligations, service assurance, risk reporting, evidence collection and remediation management.

Strong analytical judgement, with the ability to evaluate evidence, distinguish material risks and recommend pragmatic action. Clear and confident written and verbal communication, including concise reporting for senior management and governance committees. Strong stakeholder management skills and the ability to influence, constructively challenge and collaborate across technical and non-technical teams.

Effective planning and delivery skills, with the ability to manage competing priorities, maintain accurate records and meet deadlines. People management or team leadership experience, with a focus on accountability, development and quality. Experience in online gambling, financial services or another highly regulated sector is advantageous.

Equal Opportunities Statement Games Global is committed to fostering a diverse and inclusive work environment. We are an equal opportunity employer and welcome applicants from all backgrounds, experiences, and communities. We do not discriminate based on race, colour, religion, gender, sexual orientation, age, national origin, disability, neurodiversity or any other protected status.

Our dedication to promoting diversity, multiculturalism, and inclusion is clearly reflected across all our teams. Join us and be a part of an organisation that is truly committed to creating a level playing field for everyone. Kindly be aware that in order to be employed at Games Global, you need to be 18 years of age or older, in accordance with our industry requirements.

Develop, maintain and embed the IT governance, risk and compliance framework, policies, standards and supporting procedures. Lead the company’s ISO 27001 certification programme and maintain certification through effective operation and continual improvement of the Information Security Management System (ISMS). Act as the designated ISMS Manager, with day-to-day accountability for ISMS governance, coordination, performance monitoring, reporting and continual improvement in accordance with ISO 27001 requirements.

Maintain the ISMS scope, risk assessment methodology, Statement of Applicability, information security objectives, control framework, documented information and certification roadmap. Serve as the key point of contact for the company’s technology provider on IT governance, information security, risk, compliance and assurance matters, ensuring responsibilities, control expectations, evidence requirements and remediation actions are clearly defined and tracked.

Coordinate regular governance and assurance engagement with the technology provider, review service and control performance, challenge material risks or control gaps, and escalate unresolved matters through the appropriate governance forums. Maintain the technology risk register and facilitate risk assessments, control evaluations, treatment plans and formal risk acceptance.

Oversee the design and operating effectiveness of IT general controls and key technology controls, including access, change, operations, resilience and supplier controls. Coordinate assurance activities and evidence for internal and external audits, regulatory reviews, certifications and customer due diligence. Plan and coordinate ISO 27001 internal audits, management reviews, surveillance and recertification audits; manage non-conformities, corrective actions and continual improvement activities to completion.

Monitor compliance with applicable technology, information security, AI, privacy and data governance obligations, including relevant licence conditions and recognised standards. Provide pragmatic advice to Technology, Product, Security, Compliance and business teams on control requirements, risk mitigation and acceptable alternatives.

Assess technology and information security risks arising from new systems, AI, material change, outsourcing, cloud services and third parties. Track control deficiencies, audit findings and remediation actions, escalating overdue or material risks through the appropriate governance forums. Define and report meaningful risk and compliance metrics, trends and emerging issues to senior management and relevant committees.

Support technology incident governance, including impact assessment, lessons learned, corrective actions and regulatory input where required. Promote a strong risk and control culture through guidance, training and constructive challenge. Lead, coach and develop team members, set clear objectives and ensure timely, high-quality delivery.

Relevant degree or equivalent professional experience. ISO 27001 Lead Implementer or Lead Auditor certification is strongly preferred; certifications such as CISA, CISM, CRISC or CISSP are advantageous. Substantial experience in IT governance, technology risk, information security compliance, audit or a related control function within a regulated or complex organisation.

Strong working knowledge of ISO/IEC 27001 and practical experience of implementing, operating and continually improving an ISMS, including certification, surveillance and recertification audits. Experience acting as an ISMS Manager or in an equivalent role, with the confidence to coordinate control owners, senior stakeholders, auditors and external service providers.

Practical experience of IT general controls, risk and control self-assessments, control testing, audit management and remediation tracking. Experience assessing cloud, third-party, cybersecurity, resilience, change and data-related risks. Demonstrable experience of technology provider governance, including oversight of contractual control obligations, service assurance, risk reporting, evidence collection and remediation management.

Strong analytical judgement, with the ability to evaluate evidence, distinguish material risks and recommend pragmatic action. Clear and confident written and verbal communication, including concise reporting for senior management and governance committees. Strong stakeholder management skills and the ability to influence, constructively challenge and collaborate across technical and non-technical teams.

Effective planning and delivery skills, with the ability to manage competing priorities, maintain accurate records and meet deadlines. People management or team leadership experience, with a focus on accountability, development and quality. Experience in online gambling, financial services or another highly regulated sector is advantageous.

Equal Opportunities Statement Games Global is committed to fostering a diverse and inclusive work environment. We are an equal opportunity employer and welcome applicants from all backgrounds, experiences, and communities. We do not discriminate based on race, colour, religion, gender, sexual orientation, age, national origin, disability, neurodiversity or any other protected status.

Our dedication to promoting diversity, multiculturalism, and inclusion is clearly reflected across all our teams. Join us and be a part of an organisation that is truly committed to creating a level playing field for everyone. Kindly be aware that in order to be employed at Games Global, you need to be 18 years of age or older, in accordance with our industry requirements.