{"id":2957228,"url":"https://alion.io/job/evolution-grc-specialists-grc-specialist-information-security-privacy","title":"GRC speciālists / GRC Specialist (Information Security & Privacy)","company":{"id":13826,"name":"Evolution","domain":"evolution.com","url":"https://alion.io/company/evolution","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":76,"open_postings":41,"ghost_share":0,"stale_share":0.951,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riga, Latvia"],"countries":["LV"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3200,"max":4200,"currency":"EUR","period":"month","gross":null,"usd_annual":56364},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"GDPR","optional":true}],"status":"closed","first_seen_at":"2026-10-20T13:38:30Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-27T14:24:11Z","board_verified":false,"closed_at":"2026-10-27T14:24:11Z","days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Evolution ir daudznacionāls uzņēmums tiešsaistes spēļu industrijas priekšgalā. Mums ir plaša pieredze pirmajā vietā un vienmēr meklējam lieliskus cilvēkus, kas palīdzētu mums izveidot nākamo lielo produktu hitu. Mūsu komanda, kurā ir vairāk nekā 1000 inženieru, darbojas no 8 inženiertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotājus visā pasaulē. Tas tiek palaists, izmantojot modernu programmatūras steku, kas atbalsta vairāk nekā 250 pilnīgi automatizētus izlaidumus mēnesī mūsu galvenajai tiešraides videi. Mēs ticam iekšējai kompetencei un veikliem darba procesiem, lai mēs varētu īstenot savu inženierijas misiju: nevainojama spēlētāja pieredze.\n--------------------------------------------------------------------------\nEvolution is a multinational business at the forefront of the online gaming industry. We have an extensive track record of number 1s and are always looking for great people to help us create the next big product hit. Our team of 1,000+ engineers operates out of 8 engineering hubs running code 24/7/365 to serve users around the world. This is run through a modern software stack supporting over 250 fully automated releases per month to our main live environment. We believe in building in-house competence and agile work processes so that we can deliver on our Engineering mission: A flawless player experience.\n At Evolution, you’ll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes.\nJoining our Information Security team and reporting to the GRC Manager, you’ll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.\nWhat you will do\nSupport our Information Security Management System (ISMS), including ISO 27001 audits and certification activities. \nCoordinate risk assessments, vulnerability scanning and penetration testing with relevant teams, and track remediation actions through to completion. \nSupport Data Protection Impact Assessments (DPIAs), privacy risk assessments, and the maintenance of records of processing activities (RoPA). \nHelp prepare for external audits, including ISAE 3402/SOC 1 and IT financial audits, by coordinating evidence and following up on findings. \nMaintain and improve security policies, privacy standards, procedures and supporting documentation. \nWork with technical and business stakeholders to identify risks, explain requirements and agree on practical security and privacy controls. \nWhat we are looking for\nPractical experience in GRC, information security, audit, risk management or data privacy, ideally 2-5 years. We also welcome candidates earlier in their careers who bring a solid foundation and motivation to develop. \nA working understanding of ISO 27001, ISMS principles and how organizations assess risks and monitor controls. \nExperience supporting audits, risk assessments or compliance activities. \nAn understanding of data protection principles and an interest in developing your privacy expertise. \nStrong organizational skills, attention to detail and the ability to follow up on actions across several teams. \nClear spoken and written English, with confidence communicating with both technical and business colleagues. \nA collaborative, practical approach: you ask questions, understand business needs and help stakeholders find solutions that meet security and privacy requirements. \nIt would be a plus if you have\nHands-on GDPR experience, including DPIAs, privacy audits, RoPA or personal data incident assessments. \nAn ISO 27001 Auditor or Implementer certification. \nOther relevant certifications, such as CIPP/E, CIPM, CRISC, CISA or Security+. \nWe offer\nGross monthly salary from 3,200 EUR to 4,200 EUR, depending on your experience and qualifications. \nAn environment that encourages new ideas and practical improvements, supported by the stability and resources of an established company. \nThe opportunity to work with international colleagues across Information Security, IT, Legal and business teams in a successful, publicly traded company. \nOpportunities to develop your expertise across GRC and data privacy, with potential involvement in AI governance and compliance projects. \nA hybrid working model, combining collaboration in our Riga office with remote work. \nHealth insurance, a contemporary office environment, development opportunities, hackathons and other benefits and perks. \n----------------------------------------------------------------------------------------------------------------\nDarba apraksts\nEvolution komandā Tu sadarbosies ar IT speciālistiem, juridisko un biznesa struktūrvienību kolēģiem, lai izvērtētu riskus, atbalstītu auditu norisi un palīdzētu ieviest drošības un privātuma aizsardzības pasākumus ikdienas procesos.\nPievienojoties Informācijas drošības komandai, Tu strādāsi GRC vadītāja pakļautībā un iesaistīsies pārvaldības, risku vadības un atbilstības (GRC) procesos. Šajā amatā varēsi pilnveidot savas prasmes neatkarīgi no tā, vai Tava līdzšinējā pieredze galvenokārt saistīta ar GRC vai ar personas datu aizsardzību apvienojumā ar zināšanām informācijas drošībā.\nTavi pienākumi\nPalīdzēt uzturēt uzņēmuma informācijas drošības pārvaldības sistēmu (ISMS), tostarp piedalīties ISO 27001 auditos un sertifikācijas procesā. \nSadarbībā ar atbildīgajām komandām koordinēt risku novērtēšanu, ievainojamību skenēšanu un ielaušanās testus, kā arī sekot trūkumu novēršanas pasākumu izpildei. \nPiedalīties novērtējumos par ietekmi uz datu aizsardzību (DPIA), palīdzēt analizēt privātuma riskus un uzturēt personas datu apstrādes darbību reģistru (RoPA). \nPalīdzēt sagatavoties ārējām pārbaudēm, tostarp ISAE 3402/SOC 1 un ar finanšu revīzijām saistītiem IT auditiem, koordinējot nepieciešamo pierādījumu apkopošanu un sekojot konstatēto nepilnību novēršanai. \nUzturēt un pilnveidot informācijas drošības politikas, privātuma standartus, procedūras un saistīto dokumentāciju. \nKopā ar tehnisko komandu un biznesa struktūrvienību pārstāvjiem identificēt riskus, skaidrot prasības un vienoties par praktiski īstenojamiem kontroles pasākumiem. \nKo mēs sagaidām\nPraktisku pieredzi GRC, informācijas drošības, audita, risku vadības vai personas datu aizsardzības jomā (vēlams 2-5 gadus). Aicinām pieteikties arī kandidātus karjeras sākumposmā ar labām pamatzināšanām un motivāciju profesionāli attīstīties. \nIzpratni par ISO 27001 prasībām, ISMS darbības principiem, risku novērtēšanu un kontroles pasākumu efektivitātes uzraudzību. \nPieredzi auditu atbalstīšanā, risku izvērtēšanā vai atbilstības nodrošināšanā. \nZināšanas par personas datu aizsardzības principiem un vēlmi padziļināt kompetenci privātuma jautājumos. \nLabas organizatoriskās prasmes, precizitāti un spēju sekot uzdevumu izpildei, sadarbojoties ar vairākām komandām. \nLabas angļu valodas zināšanas mutvārdos un rakstveidā, kā arī prasmi pārliecinoši sazināties ar tehnisko komandu un biznesa struktūrvienību kolēģiem. \nPraktisku, uz sadarbību vērstu pieeju: Tu uzdod jautājumus, iedziļinies biznesa vajadzībās un palīdzi rast risinājumus, kas atbilst drošības un privātuma aizsardzības prasībām. \nPar priekšrocību uzskatīsim\nPraktisku pieredzi Vispārīgās datu aizsardzības regulas (VDAR jeb GDPR) prasību piemērošanā, piemēram, NIDA veikšanā, privātuma auditos, RoPA uzturēšanā vai personas datu aizsardzības pārkāpumu izvērtēšanā. \nISO 27001 auditora vai standarta ieviešanas speciālista sertifikātu. \nCitus amatam atbilstošus sertifikātus, piemēram, CIPP/E, CIPM, CRISC, CISA vai Security+. \nMēs piedāvājam\nBruto mēnešalgu 3200 - 4200 EUR apmērā atkarībā no Tavas pieredzes un kvalifikācijas. \nDarba vidi, kurā ir vieta jaunām idejām un praktiskiem uzlabojumiem, kā arī stabila uzņēmuma atbalstu un resursus. \nIespēju sadarboties ar starptautiskiem kolēģiem informācijas drošības, IT, juridiskajā un biznesa jomā, strādājot veiksmīgā uzņēmumā, kura akcijas tiek kotētas biržā. \nProfesionālās attīstības iespējas GRC un personas datu aizsardzības jomā, tostarp potenciālu dalību mākslīgā intelekta pārvaldības un atbilstības projektos. \nHibrīddarbu, apvienojot klātienes sadarbību Rīgas birojā ar iespēju strādāt attālināti. \nVeselības apdrošināšanu, mūsdienīgu biroju, mācību iespējas, hakatonus un citus darbinieku labumus.","description_format":"text","description_chars":8422,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Hybrid work"],"hiring_locations":[{"name":"Latvia","iso":"LV","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","iGaming & Gambling"],"lifecycle":[{"event":"open","at":"2026-10-20T21:54:15Z"},{"event":"close","at":"2026-10-27T14:24:11Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":56364,"is_top_pay":false},"html_url":"https://alion.io/job/evolution-grc-specialists-grc-specialist-information-security-privacy","json_url":"https://alion.io/job/evolution-grc-specialists-grc-specialist-information-security-privacy.json","meta":{"generated_at":"2026-10-31T06:12:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9052,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13826},"rest":"https://alion.io/mcp/rest/get_company?id=13826"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fevolution-grc-specialists-grc-specialist-information-security-privacy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fevolution-grc-specialists-grc-specialist-information-security-privacy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fevolution-grc-specialists-grc-specialist-information-security-privacy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/evolution-grc-specialists-grc-specialist-information-security-privacy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fevolution-grc-specialists-grc-specialist-information-security-privacy"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2957228}},{"tool":"search_jobs","arguments":{"company":"evolution.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2957228},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}