Information Security GRC Team Lead

About the role

The Information Security Department at LeoVegas is part of the Legal & Compliance team and focuses on Governance, Risk, and Compliance (GRC), Security Operations, Incident Response, and Security Awareness Training. The GRC Team Lead works in a small, cross‑functional team alongside Internal IT, Privacy, Risk, Tech Compliance, Legal, and Platform groups. This role ensures strong governance, regulatory compliance, and the adoption of industry‑best security practices across the LeoVegas Group.

Key responsibilities

• Develop and implement the organisation’s GRC strategy together with the Head of Information Security.
• Contribute to security KPIs, objectives and strategies to improve overall security posture.
• Conduct security maturity assessments and lead risk analyses.
• Detect gaps in security processes, assess associated risks and recommend remediation.
• Maintain the Group’s Security Risk Register and information security policies, standards and guidelines.
• Manage regulatory audits, external auditor relationships and licensed market entry projects.
• Lead vendor onboarding due‑diligence and supplier monitoring processes.
• Support business continuity and disaster recovery planning, testing and maintenance.
• Develop and deliver security awareness and education programmes for employees.
• Provide leadership, mentorship and performance management for the security team.

Required profile

• 5‑7 years of experience in information security with a strong focus on GRC.
• Proven experience leading and mentoring security teams.
• Hands‑on experience with business continuity, disaster recovery, vendor risk management, IT audits and regulatory compliance.
• Strong knowledge of security frameworks such as NIST, ISO 27001 and COBIT.
• Excellent communication skills and the ability to influence stakeholders at all levels.

Required skills

• Business continuity
• Disaster recovery
• Vendor risk management
• IT audits
• Regulatory compliance
• NIST framework
• ISO 27001
• COBIT
• GDPR
• PCI‑DSS
• SOC 2

What we offer

• Hybrid work policy
• 4 weeks of Workation (terms & conditions apply)
• Well‑being allowance to support an active lifestyle
• Private health insurance
• Discounts across retailers, gyms, bars & restaurants
• Employee assistance programme