IT GRC Controller
The IT GRC Controller will play a key part in delivering a cohesive and scalable enterprise-wide governance and compliance framework. This role involves hands-on involvement with policy development, control design, audit coordination, regulatory engagement, and risk management processes.
The successful candidate's drive and ideas will help the organisation move faster, improve smarter, and stay ahead of the game. They will manage security risks, coordinate IT controls, and ensure audit readiness. This role requires a proactive individual who can act as a coordination point between GRC, IT teams, and business stakeholders to ensure consistent execution of GRC processes across multiple entities.
- Understand the security risk landscape.
- Assist in identifying and documenting security risks.
- Provide input into third-party and vendor risk management where necessary.
- Support the coordination and tracking of IT and information security controls across the organisation.
- Assist control owners to design, document/improve controls.
- Ensure control owners understand their responsibilities and provide timely inputs.
- Monitor control operation to ensure consistency and completeness.
- Coordinate the collection, validation, and organisation of control evidence.
- Ensure evidence is accurate, complete, and centrally stored for audit readiness.
- Support audit preparation by ensuring required artefacts are available and up to date.
- Produce regular reporting on control status, outstanding actions, and remediation progress.
- Support management reporting to provide visibility of GRC health and delivery risks.
- Act as a coordination point between GRC, IT teams, and business stakeholders.
- Follow up on dependencies, outstanding actions, and delays.
- Support consistent execution of GRC processes across multiple entities.
- Maintain GRC documentation, including control descriptions, policies and procedures (as required) and updates to governance processes and templates.
- Identify gaps in control execution, risk tracking, or evidence management.
- Suggest improvements to enhance efficiency and consistency of GRC operations.
- Support adoption of tooling and automation where appropriate.
- Clear, confident communication (written and verbal), and the ability to breakdown complex ideas (required).
- A collaborative mindset, working smoothly with cross-functional teams to hit shared goals (required).
- Strong organisational skills and the ability to manage multiple projects without dropping the ball (required).
- Exceptional attention to detail and a commitment to high-quality work (required).
- Adaptability – you stay sharp, productive and positive in fast-moving environments (required).
- Experience in IT governance, risk, or compliance environments (required).
- Strong understanding of control frameworks and risk management principles (required).
- Experience managing or coordinating evidence and audit artefacts (required).
- Strong organisational, tracking, and follow-up capability (required).
- In-depth knowledge of sports betting markets, including odds calculation, betting types and market trends (nice-to-have).
- Previous experience in the online gaming or casino industry, with a strong understanding of player behaviour and industry regulations (nice-to-have).
- Familiarity with gambling regulations and compliance requirements in various jurisdictions, ensuring adherence to legal standards (nice-to-have).
- Experience in developing and executing customer retention strategies (nice-to-have).
- Familiarity with ISO 27001 or similar frameworks (nice-to-have).
- Experience working in regulated environments (nice-to-have).
- Exposure to GRC tooling platforms (nice-to-have).
- Experience supporting multi-entity or cross-jurisdictional environments (nice-to-have).
- Supergrowth learning and development programmes
- Performance tool for feedback and career development
- Employee Assistance Programme
- Group Life Cover
- Funeral Fund Benefit
- Income Continuation Benefit
- Medical Aid Subsidy
- Retirement Annuity Subsidy
DigiOutsource is a global iGaming technology and services company and part of Super Group (SGHC), the holding company behind the Betway and Spin brands. Headquartered in Cape Town, South Africa, with offices in London and Portugal, it provides software development, digital marketing, business intelligence, design and communications services that power leading online gaming brands. The company employs around 1,200 people across multiple continents. DigiOutsource was formed from the merger of the ForwardSlash and SpeakUp Communications businesses and operates as a key technology hub within Super Group.