GRC Specialist (Information Security & Privacy)

About the role

Evolution, a multinational online gaming company, is hiring a GRC specialist in its Information Security team in Riga, reporting to the GRC Manager. You will work with IT, legal and business colleagues to assess risks, support audits and embed security and privacy controls into everyday processes. The role suits people whose background is mainly GRC or who combine privacy work with a foundation in information security.

Key responsibilities

• Support the Information Security Management System (ISMS), including ISO 27001 audits and certification
• Coordinate risk assessments, vulnerability scanning and penetration testing, and track remediation to completion
• Support Data Protection Impact Assessments (DPIAs), privacy risk assessments and the Records of Processing Activities (RoPA)
• Help prepare for external audits such as ISAE 3402/SOC 1 and IT financial audits by coordinating evidence and following up on findings
• Maintain and improve security policies, privacy standards, procedures and related documentation
• Work with technical and business stakeholders to identify risks and agree on practical security and privacy controls

Required profile

• Practical experience in GRC, information security, audit, risk management or data privacy, ideally 2-5 years; early-career candidates with a solid foundation are also welcome
• Experience supporting audits, risk assessments or compliance activities
• Understanding of data protection principles and an interest in developing privacy expertise
• Good organisational skills, attention to detail and clear spoken and written English

Required skills

• Working knowledge of ISO 27001, ISMS principles and risk assessment
• A plus: hands-on GDPR experience (DPIAs, privacy audits, RoPA, incident assessments)
• A plus: ISO 27001 auditor or implementer certification, or CIPP/E, CIPM, CRISC, CISA or Security+

What we offer

• Gross monthly salary from 3,200 to 4,200 EUR depending on experience and qualifications
• Hybrid working between the Riga office and remote work
• Health insurance, a modern office, development opportunities, hackathons and other benefits
• Work with international colleagues in a publicly traded company, with possible involvement in AI governance and compliance projects