Logo for Pragmatic Play

Head of IT Compliance

Pragmatic Play

Role overview

Qualifications

  • Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.
  • 5+ years’ experience in IT compliance, GRC, risk management, or information security.
  • Strong understanding of ISO 27001:2022 and SOC 2 Trust Services Criteria.
  • Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).

Responsibilities

  • Lead and maintain the company’s ISO 27001 ISMS and SOC 2 certification programs.
  • Serve as the primary point of contact for engaging with external and internal auditors.
  • Develop, maintain, and enforce IT security and compliance policies, procedures, and standards.
  • Oversee access control, change management, incident management, and third-party risk management.

Key facts

  • Remote from: Poland
  • Full time
  • Senior (5-10 years)
  • English

Hard skills

Risk Management Policy Development Software As A Service (SaaS) DevOps CI/CD

Other skills

  • Communication
  • Analytical Thinking
  • Problem Solving
  • Detail Oriented

About the company

Pragmatic Play logo

Pragmatic Play

Sports Betting & iGaming

Your favourite games, every time. Pragmatic Play is a leading supplier of content to the most successful global brands in the iGaming industry. We work closely with software development and services company ARRISE to power up new possibilities of play through a single API, offering a multi-product portfolio of award-winning slots, live casino, bingo, virtual sports, sportsbook and more, available in all major regulated markets, languages and currencies. Driven by a persistence to craft immersive entertainment experiences, we consistently deliver games that players love time and time again.

Company details

Company typeLarge
IndustrySports Betting & iGaming
Company size1001 - 5000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Description

Position at ARRISE

About us:

ARRISE sets the benchmark for service delivery and excellence in the iGaming industry. Playing a key role in the success of its clients, which include Pragmatic Play, a brand relied upon by the world’s biggest online casinos for its cutting-edge products, ARRISE helps to deliver exceptional gaming experiences to millions of players worldwide. 
  
Our global team of talented and driven professionals are shaping the future of iGaming. Headquartered in Gibraltar, we have offices spanning Canada, India, the Isle of Man, Latvia, Malta, Romania, Serbia, Bulgaria, and the UAE, and more exciting destinations on the horizon. 
  
At ARRISE, we take pride in creating growth opportunities at all levels, constantly investing in our people while welcoming new colleagues and forging strategic partnerships that open new opportunities for success. To achieve this, we bet on ourselves. We know that success is a collective effort, and our team is driven by ambition, collaboration, and a shared commitment to grow and succeed—while embracing every step of the journey. 
  
Be part of the future of iGaming with ARRISERS! See a job that excites you? Apply now, and our friendly recruitment   team   will   connect   with   you   soon.   Your   journey   starts   here! 

About the Role

We are seeking an experienced IT Compliance Specialist to lead and manage our compliance programs across ISO 27001 and SOC 2, ensuring our gaming platform and related services meet the highest standards of security, privacy, and regulatory compliance. The role will serve as the primary liaison for both external and internal auditors for ISO 27001 certification and SOC 2 attestation, with a focus on addressing scope changes, corporate structure changes, and responding to client security questionnaires.

Key Responsibilities

Compliance Management

  • Lead and maintain the company’s ISO 27001 Information Security Management System (ISMS) and SOC 2 Trust Services Criteria certification programs.
  • Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC 2 attestation processes.
  • Own compliance audits: plan, coordinate with auditors, collect evidence, and provide comprehensive audit responses.
  • Manage risk assessments, control testing, and remediation activities to ensure ongoing compliance.
Policy & Process Governance
  • Develop, maintain, and enforce IT security and compliance policies, procedures, and standards.
  • Ensure documentation aligns with ISO 27001 Annex A controls, SOC 2 requirements, and addresses evolving compliance needs due to scope or structural changes.
  • Respond to client security questionnaires with accurate and detailed information to demonstrate compliance.
Control Implementation & Monitoring
  • Oversee access control, change management, incident management, and third-party/vendor risk management within the scope of ISO 27001 and SOC 2.
  • Ensure compliance across environments supporting software development, hosting platforms, and APIs.
  • Monitor the effectiveness of security controls and recommend improvements to mitigate emerging risks.
Audit & Assurance
  • Act as the central liaison for external auditors, regulators, and certification bodies, ensuring clear communication and issue resolution.
  • Conduct internal compliance audits, gap assessments, and readiness reviews to maintain certification readiness.
  • Track and close compliance findings and audit issues, ensuring timely resolution and documentation.
  • Provide expert guidance on compliance implications of ISO 27001 scope changes and corporate structure changes.
Training & Awareness
  • Build awareness of compliance requirements across development, operations, and support teams.
  • Deliver targeted training on compliance obligations, including secure software development, data handling, and gaming industry standards.
  • Vendor & Third-Party Risk Management
  • Assess compliance of key vendors, including cloud hosting providers, content partners (e.g., Pragmatic Play), and integration providers.
  • Ensure contractual and SLA alignment with ISO 27001 and SOC 2 requirements.
  • Reporting
  • Provide regular compliance updates, risk posture reports, and responses to client inquiries to senior management and stakeholders.
  • Support management with compliance performance metrics and KPIs.
Qualifications & Experience
  • Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.
  • 5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries.
  • Strong understanding of:
  • ISO 27001:2022 Information Security Management System (ISMS)
  • SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy)
  • Proven track record of leading certification and audit processes, including direct engagement with auditors.
  • Experience responding to client security questionnaires and communicating compliance status effectively.
  • Experience with SaaS/PaaS environments, APIs, and cloud-based hosting services.
  • Knowledge of secure SDLC, DevOps, and CI/CD compliance integration.
  • Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).
Key Skills
  • Excellent knowledge of IT compliance, audit, and risk frameworks, with expertise in ISO 27001 and SOC 2.
  • Strong communication and stakeholder management skills, with the ability to represent the company to auditors and clients.
  • Ability to influence cross-functional teams (dev, ops, support) to adopt compliance practices.
  • Analytical thinker with a problem-solving approach to compliance challenges, including scope and structural changes.
  • Detail-oriented with strong documentation, evidence management, and client questionnaire response skills.
What we offer
  • We offer a highly competitive salary
  • A detailed company training on highest standards
  • A chance to work in friendly and supportive culture
  • Tremendous growth opportunities in a large fast moving international company

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Related jobs

Poland

Other jobs at Pragmatic Play

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.