IT Governance, Risk and Compliance Manager
Games Global is looking for an IT Governance, Risk and Compliance Manager to lead and embed the company’s IT governance, risk and compliance framework. The role ensures that technology risks are identified, assessed and managed in line with regulatory obligations, business objectives and risk appetite.
The role will act as the designated ISMS Manager for ISO 27001 and related audits, owning the achievement and ongoing maintenance of certification and the effective operation of the Information Security Management System. The role will also serve as the principal governance, risk, compliance and assurance contact for the company’s technology provider, while providing independent oversight and practical guidance across information security, technology controls, AI, data governance, third-party risk and assurance.
- Develop, maintain and embed the IT governance, risk and compliance framework, policies, standards and supporting procedures.
- Lead the company’s ISO 27001 certification programme and maintain certification through effective operation and continual improvement of the Information Security Management System (ISMS).
- Act as the designated ISMS Manager, with day-to-day accountability for ISMS governance, coordination, performance monitoring, reporting and continual improvement in accordance with ISO 27001 requirements.
- Maintain the ISMS scope, risk assessment methodology, Statement of Applicability, information security objectives, control framework, documented information and certification roadmap.
- Serve as the key point of contact for the company’s technology provider on IT governance, information security, risk, compliance and assurance matters, ensuring responsibilities, control expectations, evidence requirements and remediation actions are clearly defined and tracked.
- Coordinate regular governance and assurance engagement with the technology provider, review service and control performance, challenge material risks or control gaps, and escalate unresolved matters through the appropriate governance forums.
- Maintain the technology risk register and facilitate risk assessments, control evaluations, treatment plans and formal risk acceptance.
- Oversee the design and operating effectiveness of IT general controls and key technology controls, including access, change, operations, resilience and supplier controls.
- Coordinate assurance activities and evidence for internal and external audits, regulatory reviews, certifications and customer due diligence.
- Plan and coordinate ISO 27001 internal audits, management reviews, surveillance and recertification audits; manage non-conformities, corrective actions and continual improvement activities to completion.
- Monitor compliance with applicable technology, information security, AI, privacy and data governance obligations, including relevant licence conditions and recognised standards.
- Provide pragmatic advice to Technology, Product, Security, Compliance and business teams on control requirements, risk mitigation and acceptable alternatives.
- Assess technology and information security risks arising from new systems, AI, material change, outsourcing, cloud services and third parties.
- Track control deficiencies, audit findings and remediation actions, escalating overdue or material risks through the appropriate governance forums.
- Define and report meaningful risk and compliance metrics, trends and emerging issues to senior management and relevant committees.
- Support technology incident governance, including impact assessment, lessons learned, corrective actions and regulatory input where required.
- Promote a strong risk and control culture through guidance, training and constructive challenge.
- Lead, coach and develop team members, set clear objectives and ensure timely, high-quality delivery.
- Relevant degree or equivalent professional experience (required)
- ISO 27001 Lead Implementer or Lead Auditor certification (preferred)
- Certifications such as CISA, CISM, CRISC or CISSP (nice-to-have)
- Substantial experience in IT governance, technology risk, information security compliance, audit or a related control function within a regulated or complex organisation (required)
- Strong working knowledge of ISO/IEC 27001 and practical experience of implementing, operating and continually improving an ISMS, including certification, surveillance and recertification audits (required)
- Experience acting as an ISMS Manager or in an equivalent role, with the confidence to coordinate control owners, senior stakeholders, auditors and external service providers (required)
- Practical experience of IT general controls, risk and control self-assessments, control testing, audit management and remediation tracking (required)
- Experience assessing cloud, third-party, cybersecurity, resilience, change and data-related risks (required)
- Demonstrable experience of technology provider governance, including oversight of contractual control obligations, service assurance, risk reporting, evidence collection and remediation management (required)
- Strong analytical judgement, with the ability to evaluate evidence, distinguish material risks and recommend pragmatic action (required)
- Clear and confident written and verbal communication, including concise reporting for senior management and governance committees (required)
- Strong stakeholder management skills and the ability to influence, constructively challenge and collaborate across technical and non-technical teams (required)
- Effective planning and delivery skills, with the ability to manage competing priorities, maintain accurate records and meet deadlines (required)
- People management or team leadership experience, with a focus on accountability, development and quality (required)
- Experience in online gambling, financial services or another highly regulated sector (nice-to-have)
Games Global is a business-to-business supplier of online casino games and content, headquartered in Douglas, Isle of Man. Established in 2021, it acquired Microgaming's iGaming portfolio and Quickfire distribution business in 2022, giving it one of the largest slot-game catalogues in the industry - thousands of titles distributed to hundreds of operators. The company aggregates content from its own studios and a network of independent developers, supplying regulated markets worldwide. It was founded by former IGT and Lottomatica executive Walter Bugno.