Security Specialist
The organisation is looking for a proactive and process-oriented Security GRC Specialist to join its Security Governance, Risk, and Compliance team. In this role, the successful candidate will help strengthen the organisation’s security governance framework by supporting security reviews, risk assessments, policy development, and security initiatives across the company.
The role involves working closely with Engineering, IT, Legal, HR, and business stakeholders to ensure security requirements are embedded into business processes and projects. A key part of the position includes driving Security Awareness initiatives to foster a strong security culture, alongside broader Governance, Risk, and Compliance activities.
As the Security GRC function continues to evolve, the specialist will have the opportunity to contribute to Security by Design, third-party security assessments, process automation, and the continuous improvement of the company’s security governance. This position is ideal for someone who enjoys combining governance, process improvement, stakeholder collaboration, and practical information security.
- Perform Security Reviews for internal projects, business initiatives, and technology changes.
- Conduct Vendor Security Assessments and support third-party risk management activities.
- Participate in Security by Design reviews by identifying security risks and defining security requirements early in the project lifecycle.
- Develop, review, and maintain security policies, standards, guidelines, and governance documentation.
- Support Governance, Risk, and Compliance initiatives, including risk assessments, control implementation, and security process improvements.
- Plan, coordinate, and continuously improve Security Awareness initiatives, including employee training and phishing simulation campaigns.
- Measure the effectiveness of security awareness activities through reporting, metrics, and recommendations for improvement.
- Support the Security Disciplinary Framework and other governance-related processes.
- Identify opportunities to automate and optimize Security GRC processes, reporting, and operational workflows.
- Collaborate with cross-functional stakeholders to improve the organisation’s overall security posture and security maturity.
- 1–3 years of experience in Information Security, Security GRC, IT Governance, Risk Management, Compliance, Security Operations, or a related field (required).
- Experience conducting security assessments, security reviews, or vendor security assessments (required).
- Experience developing security policies, standards, procedures, or governance documentation (required).
- Experience planning or supporting Security Awareness programs, phishing simulations, or security training initiatives (required).
- Experience with reporting and analytics tools (required).
- Basic scripting or workflow automation skills (required).
- Experience with Jira, Confluence, Google Workspace, or similar collaboration platforms (required).
- Familiarity with AI tools (ChatGPT, Gemini, Claude, etc.) to improve documentation, research, and operational efficiency (required).
- Private health insurance
- Sports benefits
- Comprehensive Mental Health Program
- Free English lessons (online)
- Local language courses
- Paid time off
- Maternity leave support
- Referral program rewards
- Upskilling, internal workshops, and participation in professional conferences and corporate events
SOFTSWISS is a global tech expert with over 15 years of experience in providing innovative iGaming solutions. The company offers comprehensive software for online casinos, sports betting, and affiliate management. To expand its global presence, in 2024, SOFTSWISS acquired Turfsport, a leading South African betting software provider, and a significant stake in Ously Games GmbH, the company behind the fastest-growing European social casino, SpinArena.net. Additionally, the company appointed Formula 1 legend Rubens Barrichello as Non-Executive Director in Latin America, focusing on Brazil's growing market. SOFTSWISS is committed to transforming the iGaming and entertainment industry for the better through tech innovations. The Team helps operators and providers establish enduring partnerships by building profitable and scalable businesses.