Security and Compliance Lead

You will define and lead the global security strategy across operational security, AI security, and compliance. You will own policy frameworks, risk management, audit readiness, vendor security, and incident response. You will partner with business functions and present security posture and recommendations to executive leadership and the board. You will also drive AI and automation initiatives that improve the efficiency and scalability of security and compliance processes.

Responsibilities

• Define and shape the global security strategy across operational security, AI security, and compliance
• Define security metrics and KPIs that demonstrate program maturity and business value
• Develop and oversee security and compliance policy frameworks across departments
• Design risk assessment frameworks and oversee organizational risk management initiatives
• Drive adoption of compliance tools and define evidence-collection and audit-readiness workflows
• Establish and oversee internal audit programs with internal teams and external auditors
• Review security assessment findings and define attack-surface reduction strategies
• Build cross-functional alignment on security initiatives
• Establish a vendor security management framework for risk evaluation and ongoing monitoring
• Present security and compliance posture and strategic recommendations to executive leadership and the board
• Oversee the incident response program and drive major incidents to closure with root-cause analysis and preventive measures
• Champion AI and automation initiatives across compliance processes

Requirements

• 8+ years of progressive experience in information security and compliance roles with strategic leadership
• Deep knowledge of security frameworks, regulatory requirements, operational security, AI security considerations, and compliance standards
• Experience developing and executing global security strategies across diverse organizational contexts
• Experience implementing compliance management platforms such as Sprinto, Vanta, or Drata at scale
• Knowledge of AI-driven automation and process optimization for security and compliance workflows
• Stakeholder management and influence skills across organizational levels
• Strategic incident response leadership and experience overseeing complex security incidents
• CISSP, CISM, CISA, or equivalent certification preferred
• Gaming or entertainment industry experience preferred
• Experience with AI security, emerging technology risk management, security automation, and orchestration preferred
• Experience advising board-level committees on security and risk matters preferred

Benefits

• Hybrid setup with a flexible work environment
• Comprehensive medical cover at zero cost
• Regular team engagement initiatives