Company Description

Evolution ir daudznacionāls uzņēmums tiešsaistes spēļu industrijas priekšgalā. Mums ir plaša pieredze pirmajā vietā un vienmēr meklējam lieliskus cilvēkus, kas palīdzētu mums izveidot nākamo lielo produktu hitu. Mūsu komanda, kurā ir vairāk nekā 1000 inženieru, darbojas no 8 inženiertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotājus visā pasaulē. Tas tiek palaists, izmantojot modernu programmatūras steku, kas atbalsta vairāk nekā 250 pilnīgi automatizētus izlaidumus mēnesī mūsu galvenajai tiešraides videi. Mēs ticam iekšējai kompetencei un veikliem darba procesiem, lai mēs varētu īstenot savu inženierijas misiju: nevainojama spēlētāja pieredze.

Job Description

At Evolution, you’ll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes. Joining our Information Security team and reporting to the GRC Manager, you’ll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.

What you will do

• Support our Information Security Management System (ISMS), including ISO 27001 audits and certification activities.
• Coordinate risk assessments, vulnerability scanning and penetration testing with relevant teams, and track remediation actions through to completion.
• Support Data Protection Impact Assessments (DPIAs), privacy risk assessments, and the maintenance of records of processing activities (RoPA).
• Help prepare for external audits, including ISAE 3402/SOC 1 and IT financial audits, by coordinating evidence and following up on findings.
• Maintain and improve security policies, privacy standards, procedures and supporting documentation.
• Work with technical and business stakeholders to identify risks, explain requirements and agree on practical security and privacy controls.

What we are looking for

• Practical experience in GRC, information security, audit, risk management or data privacy, ideally 2–5 years. We also welcome candidates earlier in their careers who bring a solid foundation and motivation to develop.
• A working understanding of ISO 27001, ISMS principles and how organizations assess risks and monitor controls.
• Experience supporting audits, risk assessments or compliance activities.
• An understanding of data protection principles and an interest in developing your privacy expertise.
• Strong organizational skills, attention to detail and the ability to follow up on actions across several teams.
• Clear spoken and written English, with confidence communicating with both technical and business colleagues.
• A collaborative, practical approach: you ask questions, understand business needs and help stakeholders find solutions that meet security and privacy requirements.

It would be a plus if you have

• Hands-on GDPR experience, including DPIAs, privacy audits, RoPA or personal data incident assessments.
• An ISO 27001 Auditor or Implementer certification.
• Other relevant certifications, such as CIPP/E, CIPM, CRISC, CISA or Security+.

We offer

• Gross monthly salary from 3,200 EUR to 4,200 EUR, depending on your experience and qualifications.
• An environment that encourages new ideas and practical improvements, supported by the stability and resources of an established company.
• The opportunity to work with international colleagues across Information Security, IT, Legal and business teams in a successful, publicly traded company.
• Opportunities to develop your expertise across GRC and data privacy, with potential involvement in AI governance and compliance projects.
• A hybrid working model, combining collaboration in our Riga office with remote work.
• Health insurance, a contemporary office environment, development opportunities, hackathons and other benefits and perks.