GRC Security Expert

GRC Security Expert responsible for defining, establishing and implementing organizational information security processes to meet regulatory, legislative and contractual obligations. Manage internal and external ISMS audits (ISO 27001, PCI DSS, and other regulatory security audits), coordinate external audits and remediation plans, identify and monitor information security risks, and develop a comprehensive information security awareness training program. Lead and manage security requirements with third parties, including due-diligence for products and services providers and contractual information security clauses. Develop, coordinate and maintain information security policies and procedures; map regulatory obligations across jurisdictions; serve as project lead within security initiatives; and continuously update knowledge to adapt to regulatory changes. Strong communication, leadership, and project-management skills are essential, with emphasis on collaborating with executives, managers and subject-matter experts. Prior experience with PCI DSS, ISO 27001:2022, and SOC/ISAE402 certifications is desired; English proficiency is required. Bonus points for SaaS/Online Gambling experience and technical familiarity with IT infrastructure, networks, databases, or software development.