Security Governance & Compliance Specialist

As a Security Governance & Compliance Specialist, you will lead security audits and assessments across Amusnet and help keep our Information Security Management System effective, current and audit-ready throughout the year. You will manage audit engagements end-to-end, maintain and evolve the ISMS governance framework, coordinate evidence and remediation, and handle security assurance requests from our clients. This is a hands-on GRC role for someone who can turn requirements into practical controls, challenge evidence where needed and keep multiple stakeholders moving toward a successful outcome. THE PERFECT TEAM MEMBER IS INSPIRED TO: Lead external security audits and assessments end-to-end, including ISO 27001/27017, market-specific security audits and IT audit engagements; Maintain and continuously improve the ISMS documentation framework, including policies, standards, procedures and guidelines, from drafting through review and approval; Plan and perform ISO 27001 internal audit activities, control testing and follow-up; Coordinate audit evidence across technical and business teams, ensuring quality, traceability and continuous audit readiness; Track remediation actions to closure, challenge control owners where needed and validate supporting evidence; Manage security questionnaires and assurance requests from clients and partners, ensuring accurate and consistent responses; Use GRC tooling, automation and AI-assisted workflows to streamline evidence collection, audit preparation, reporting and other repetitive GRC activities; Support gap assessments and implementation activities for new security standards or market-specific requirements when needed. THE SKILLS THAT WILL GRAB OUR ATTENTION: 3+ years of experience in Information Security, IT Audit, GRC or a closely related field; Strong hands-on knowledge of ISO/IEC 27001 and experience maintaining or operating an ISMS; Proven experience coordinating external audits and performing internal audit or control assurance activities; Strong ability to produce clear security governance documentation and translate requirements into practical actions for control owners; Good understanding of common technical security controls and the ability to assess supporting evidence critically; Strong stakeholder management, organisation and communication skills across both technical and business teams; Relevant university degree or equivalent practical experience. SKILLS CONSIDERED AS AN ADVANTAGE: Experience with SOC 2 or security requirements in regulated industries; Experience with GRC platforms, compliance automation or evidence-management tooling; Relevant certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISA, CISM or CISSP; Experience in iGaming, fintech, financial services, telecoms or another multi-market regulated environment.