Information Security GRC Analyst

About the role

The Information Security GRC Analyst joins LeoVegas' Information Security team within the Legal & Compliance department. Working closely with Internal IT, Privacy, Tech Compliance, Legal and other stakeholders, the analyst ensures governance, risk and compliance practices are embedded across the group.

Key responsibilities

• Assist with development, maintenance and testing of business continuity and disaster recovery plans.
• Participate in security maturity assessments, risk assessments and regulatory audits.
• Maintain the Group's Security Risk Register and support vendor security reviews.
• Help manage security incidents, including data breach response, mitigation and stakeholder communication.
• Identify gaps in security processes and product portfolios, evaluate risks and recommend remediation.
• Develop security KPIs, objectives and strategies to improve overall security posture.
• Lead employee training and education programmes related to information security.
• Create and maintain information security policies, standards and guidelines.

Required profile

• Degree in Computing, Cybersecurity or Information Systems (Master’s preferred).
• Relevant certifications such as CISSP, CISA or CRISC (preferred).
• Minimum of 3 years experience in a cybersecurity role.
• Familiarity with security auditing processes and regulatory compliance.

Required skills

• Knowledge of ISO 27001 and PCI‑DSS standards.
• Experience with modern cloud platforms.
• Incident response and handling of security incidents.
• Security auditing and risk assessment techniques.

What we offer

• Hybrid work policy.
• 4 weeks of Workation (terms & conditions apply).
• Well‑being allowance to support an active lifestyle.
• Private health insurance.
• Discounts across retailers, gyms, bars & restaurants.
• Employee assistance programme.