Senior Manager Security GRC

The Team

Open Bet is a global leader in betting and gaming entertainment, trusted by over 200 partners to create memorable winning moments for millions of players worldwide. From processing bets during iconic events like the FIFA World Cup and Super Bowl to pioneering next-gen products like Bet Builder, we continuously redefine the player experience with high-quality content, cutting-edge technology, and advanced player protection tools.

For over 25 years, our unbeatable platform has powered the most recognizable betting brands, ensuring peak performance with 100% uptime, unmatched scale, and speed. With 85 licenses, 20 World Lottery Association operators on our customer roster, and a team of 1,200+ experts across 14 countries, we remain at the heart of the industry. Join Open Bet to take your career to the next level and be part of a global innovative team shaping the future of betting entertainment for millions worldwide.

Open Bet is seeking a GRC Senior Security Manager to strengthen its growing Cyber Security team. This position requires a seasoned security professional with a proven track record in GRC leadership and team management. Reporting directly to the Global Cyber Security Director, you will be managing Open Bet’s GRC team, driving governance, risk, and compliance, and ensuring the organization’s cyber resilience.

The Cyber Governance, Risk & Compliance (GRC) Senior Security Manager is a senior leadership role within the Cyber Security job family, suited for someone with strong experience shaping security governance and operational strategy. You will lead the performance of the GRC function, ensuring alignment with organizational security strategy, regulatory obligations, and operational excellence, while acting as a strategic partner across business and technology domains.

• The employee holding this position is expected to report to the Global Cyber Security Director and collaborate closely with other technical and non-technical teams to successfully deliver projects from a cybersecurity GRC perspective.
• You will lead and mentor a team of cybersecurity GRC professionals, fostering a culture of excellence, delivering team/personal KPIs, and ensuring engineering best practices—including secure development, incident management, CI principles, and fast feedback loops—are embedded across teams.
• You will lead the implementation, maintenance, and continual improvement of ISO-based management systems (including ISO 27001, 27017, and 27108), managing the end-to-end lifecycle of internal and external ISO audits.
• You will oversee SOC 1 and SOC 2 Type I/II reporting requirements, ensuring controls are documented consistently, and lead preparation activities for WLA (World Lottery Association) Security Control Standards audits. All outputs from these assessments will feed into continuous improvement cycles, risk registers, and compliance reporting dashboards.
• You will actively participate in a 'Follow-the-Sun' operational model, occasionally shifting working hours to align with international clients, cross-border stakeholders, and regional regulatory timelines. You will manage cross-functional coordination with auditors and control owners, and support customer-facing discussions around Open Bet's security posture, certifications, and risk assurance.
• Furthermore, you will drive the Cyber Security Third-Party Risk Management (TPRM) and Vendor Security Assurance program end-to-end. This involves evaluating suppliers and cloud providers using risk-based methodologies, ensuring ongoing security assessments, and collaborating with Legal, Procurement, and Finance to incorporate security requirements into contractual agreements, as well as managing vendor offboarding and exit plans.

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field is required, while a Master’s degree is preferred.
• You should bring a minimum of 8-10 years in cybersecurity, with at least 3-4 years in a leadership role.
• Preferred Security Certifications include CISSP, CISM, CISA, CCSP, or being an ISO 27001/27017/27018 Lead Implementer or Lead Auditor.
• The…