Jobs Security Analyst

Domain: Waste Management
Client: UK-based client
Location: Remote
Employment Type: Contract
Project: Dashboard Development & Data Analytics

About the Role

We are looking for a DBT & QuickSight Analyst to help turn existing beta dashboards into a polished, production-ready reporting product for a client in the Waste Management domain.

You will work with existing Amazon QuickSight dashboards, improving their functionality, fixing reported issues, and developing a standardized suite of dashboards with Basic and Premium tiers. The dashboards will provide business insights into revenue and costs, work types, customer performance, tonnage moved, and operational processes.

Most of the data is already modeled in Snowflake, so your main focus will be on building aggregated reporting tables in dbt and ensuring the dashboards deliver accurate, reliable, and meaningful insights.

Responsibilities

• Develop and maintain Amazon QuickSight dashboards for production release.
• Create standardized dashboard packages for Basic and Premium offerings.
• Build aggregated reporting tables in dbt on top of existing Snowflake models.
• Develop datasets, calculated fields, and SPICE configurations in QuickSight.
• Implement and maintain row-level security to ensure appropriate data access.
• Analyze and fix bugs reported by clients in existing dashboards.
• Aggregate and transform data to support business reporting and analytics.

• Collaborate with the team using Git/GitHub and follow established development workflows.

   

Requirements

• Strong hands-on experience with Amazon QuickSight, including datasets, SPICE, calculated fields, and row-level security.
• Solid SQL skills and experience writing queries for analytical reporting.
• Practical experience with dbt for data transformation and modeling.
• Experience building aggregated datasets or reporting tables for BI dashboards.
• Familiarity with Git/GitHub and version control workflows.

• Ability to troubleshoot existing dashboards and ensure data accuracy.

   

Nice to Have

• Experience working with Snowflake.
• Experience developing business intelligence solutions focused on financial and operational metrics.

• Understanding of dashboard productization, including standardized reporting packages and tiered feature offerings.

   

Project Scope

The project focuses on improving and productizing existing dashboards for a UK-based client in the Waste Management domain, using data already available in the current data platform. No integration of additional external data sources is required.

Our partner is a fast-growing algorithmic trading and fintech company with a proven track record of exceptional results. They delivered annual returns of 60–100%. Current AUM stands at $15M, with an additional $20M from a prominent Hong Kong-based fund in advanced discussions. Their proprietary platform processes up to 12,000 messages per second via WebSocket, generates ~4,000 trading signals annually (75% profitable), and operates across Binance and Bybit futures markets — with active plans to scale further.
 

Main Responsibilities

– Develop and implement sophisticated algorithms for automated trading across financial markets
– Research and backtest new trading strategies using historical and real-time data
– Build mathematical and statistical models for risk assessment and market movement prediction
– Analyze and optimize existing strategies to improve performance and cost-effectiveness
– Collaborate closely with developers and engineers to integrate trading algorithms into the production system
– Conduct stress testing of strategies and adapt them to rapidly changing market conditions
– Monitor live trading performance, debug issues, and ensure strategy resilience
– Contribute to the development of a scalable, high-performance system architecture
 

Mandatory Requirements

Must have:

– 5+ years of experience in algorithmic trading, financial analysis, or quantitative modeling
– Deep understanding of financial markets, trading theories, and algo trading principles
– Strong expertise in probability theory, statistics, and mathematical modeling
– Proficiency in Python and/or Go; familiarity with Pandas, NumPy, scikit-learn
– Hands-on experience with live data feeds, exchange APIs, and financial platforms
– Proven ability to develop and test trading strategies using statistical methods

Nice to have:

– Experience with Binance, Bybit, or similar crypto exchanges
– Knowledge of HFT techniques and algorithm optimization
– Familiarity with ML methods for forecasting and classification
– Experience with distributed systems or high-performance computing; knowledge of Rust or C++
 

We offer

– Performance bonuses — percentage of profits generated by your strategies + milestone incentives for development and optimization
– Professional development — sponsorship for CFA/FRM/CQF certifications, access to industry conferences and internal training programs
– Cutting-edge tools — high-performance servers, GPU clusters, proprietary backtesting infrastructure, premium datasets and APIs
– Flexible remote work — fully remote to start, with a future office in Europe; flexible hours aligned with global markets
– Growth opportunity — join at a pivotal stage of expansion: five major exchanges, U.S. market entry, $35–40M capital raise in progress, and a sub-fund being established under a leading Hong Kong partner

We are inviting you, a highly motivated and results-oriented Security Operations Analyst to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.

Responsibilities

• Monitor prioritized alert queues and validate whether alerts indicate real risk
• Enrich cases and correlate relevant endpoint, identity, authentication, network, service, asset, user, timeline, and business context
• Perform initial investigations, classify alerts, assess preliminary severity and scope, and document the evidence and reasoning in the case-management system
• Close false positives and execute approved low-risk actions only through defined runbooks
• Escalate suspected incidents, privileged-account issues, and high-impact or production-impact cases to L2, the manager, or Incident Response
• Maintain clear handover notes and support improvements to case quality and runbooks

Requirements

• At least 1+ year hands-on experience with security alert triage through work, including use of at least one SIEM and exposure to EDR or XDR and case-management workflows
• Ability to build basic searches or queries, filter security events, and correlate related activity across more than one data source (Experience with basic SIEM query languages such as KQL, EQL)
• Ability to interpret common endpoint, identity, authentication, network, DNS, HTTP, and service or cloud audit telemetry at an initial-investigation level
• Working fundamentals of Windows and Linux, TCP/IP, DNS, HTTP, authentication, access control, and common attack patterns such as phishing, credential abuse, malware execution, and suspicious account activity
• Ability to distinguish true positives, false positives, and benign activity; assign a preliminary severity; identify affected users or assets; and recognize when scope or impact is uncertain
• Basic use of indicators of compromise, reputation sources, and threat-intelligence context, with awareness of the MITRE ATT&CK framework
• Ability to create a concise investigation timeline and document evidence, actions, conclusions, and handover or escalation notes in a case-management system

Will be a plus

• Simple Python or PowerShell scripts for investigation and enrichment
• Exposure to cloud, email-security, or SaaS audit logs and common phishing-investigation workflows
• Practical cybersecurity labs or an entry-level certification such as Security+ or CySA+
• Experience with MacOS

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

• Project Description:

  One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
  You will be a member of a cross functional team.
  Key project stakeholders are open for innovative ideas.
  Project is based on SCRUM methodology.
  This is a great opportunity to work in an international team, apply and learn modern IT technologies

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies

• Languages:
  • English: B2 Upper Intermediate

Project Description:

One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
You will be a member of a cross functional team.
Key project stakeholders are open for innovative ideas.
Project is based on SCRUM methodology.
This is a great opportunity to work in an international team, apply and learn modern IT technologies

Responsibilities:

Quickly learn new technologies and improve proficiency
Follow up with Developer on open vulnerabilities
Share reports of open, closed vulnerabilities
Develop unique, effective security strategies for software systems, networks, and cloud provider
Safeguards information system assets by
identifying and solving potential and actual security problems
Maintain quality service by following
organization standards
Contribute to team effort by accomplishing
related results as needed

Mandatory Skills Description:

Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
Understanding of networking, Operating systems (Windows and Linux)
Basic concepts in programming Ex: Python
Very good English as team is multinational

Nice-to-Have Skills Description:

Willing to have a hacker mindset and methodology
Familiar with agile methodologies

Languages:

English: B2 Upper Intermediate

We are inviting you, a highly motivated and results-oriented Security Operations Analyst to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.

Responsibilities

• Monitor prioritized alert queues and validate whether alerts indicate real risk
• Enrich cases and correlate relevant endpoint, identity, authentication, network, service, asset, user, timeline, and business context
• Perform initial investigations, classify alerts, assess preliminary severity and scope, and document the evidence and reasoning in the case-management system
• Close false positives and execute approved low-risk actions only through defined runbooks
• Escalate suspected incidents, privileged-account issues, and high-impact or production-impact cases to L2, the manager, or Incident Response
• Maintain clear handover notes and support improvements to case quality and runbooks

Requirements

• 1+ year of commercial hands-on experience in security alert triage, utilizing at least one SIEM platform, with working knowledge of EDR/XDR and case-management workflows.
• Ability to build basic searches or queries, filter security events, and correlate related activity across more than one data source (Experience with basic SIEM query languages such as KQL, EQL)
• Ability to interpret common endpoint, identity, authentication, network, DNS, HTTP, and service or cloud audit telemetry at an initial-investigation level
• Working fundamentals of Windows and Linux, TCP/IP, DNS, HTTP, authentication, access control, and common attack patterns such as phishing, credential abuse, malware execution, and suspicious account activity
• Ability to distinguish true positives, false positives, and benign activity; assign a preliminary severity; identify affected users or assets; and recognize when scope or impact is uncertain
• Basic use of indicators of compromise, reputation sources, and threat-intelligence context, with awareness of the MITRE ATT&CK framework
• Ability to create a concise investigation timeline and document evidence, actions, conclusions, and handover or escalation notes in a case-management system
• Ability to follow approved runbooks, perform only authorized low-risk actions, recognize the limits of L1 authority, and escalate suspected incidents correctly

Will be a plus

• Simple Python or PowerShell scripts for investigation and enrichment
• Exposure to cloud, email-security, or SaaS audit logs and common phishing-investigation workflows
• Practical cybersecurity labs or an entry-level certification such as Security+ or CySA+
• Experience with MacOS

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

• One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
  You will be a member of a cross functional team.
  Key project stakeholders are open for innovative ideas.
  Project is based on SCRUM methodology.
  This is a great opportunity to work in an international team, apply and learn modern IT technologies

   

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

   

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

   

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies

   

• Languages:

  • English: B2 Upper Intermediate

     

• Recruitment process:
  CV Review — the project team reviews your experience and its relevance to the position.
  Technical Interview — a technical discussion with our interviewer in English.
  Project Management Interview (PMI) — a discussion about your experience, communication, and project fit.
  Client Interview — the final interview with the client’s project team.

One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
You will be a member of a cross functional team.
Key project stakeholders are open for innovative ideas.
Project is based on SCRUM methodology.
This is a great opportunity to work in an international team, apply and learn modern IT technologies

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies

🎰 Risk & Fraud Manager | Prague 🎰
 

Project: Sweepstakes
Format: Office, Prague
Salary: $2,000 + income tax covered by the company, medical and social insurance
Schedule: 5/2, 15:00–00:00 Prague time
Days off: Flexible, depending on workload
Breaks: 3 × 15 min + 30 min lunch
 

We are looking for a Risk & Fraud Manager with 4+ years of experience in iGaming 
 

Responsibilities:

• Monitor player activity and identify suspicious patterns
• Review large wins and redemptions
• Detect fraud, multi-accounting, bonus abuse and abnormal game behaviour
• Analyse payment risks and chargebacks
• Handle KYC, Risk and Compliance cases
• Work with casino aggregators and game providers on disputed rounds
• Create and configure risk rules, alerts and monitoring processes
• Prepare weekly risk reports
• Analyse new games before and after launch
• Identify potential risks and suspicious player activity
   

Requirements:

• 4+ years of experience in iGaming 
• Practical experience with Risk & Fraud processes
• Strong understanding of fraud, multi-accounting and bonus abuse
• Understanding of payment risk and chargebacks
• Experience with KYC / Risk / Compliance cases
• Understanding of casino aggregators and game providers
• Experience with disputed rounds is a plus
• Good understanding of risk rules, alerts and monitoring processes
• English — B2+
• Currently based in Prague and ready to work from the office

If you have 1+ year of experience in iGaming / Online Casino and a solid understanding of Casino Risk & Fraud, let’s connect!

What we’re looking for:

• Fraud, Multi-accounting, Bonus Abuse
• Payment Risk & Chargebacks
• KYC / Risk / Compliance
• Analysis of big wins and suspicious player behaviour
• Disputed rounds, casino aggregators & game providers
• Risk rules, alerts & monitoring
• English - B2+
• Russian - B2+

Conditions:
Prague, office-based — only candidates currently living in Prague will be considered
B2B contract, medical and social insurance
5/2 schedule, 15:00–00:00 Prague time
Days off are flexible and may fall on weekdays

About Project: Our client is a US payment facilitator in the dental space, on the market for 10+ years. Their platform runs on Azure and is being actively modernized.
About Role: We’re hiring a hands-on Security Analyst / Security Engineer to take ownership of security on a growing platform and shape how it’s done. You’ll investigate and resolve security events end-to-end and work closely with the engineering team.

Core Responsibilities

• Monitoring, investigating, and responding to security events directly, without handing off to separate escalation tiers
• Proactively hunt for threats across the Azure environment
• Support the engineering team day-to-day on security and infrastructure questions
• Handle Azure administration: configuration, access management, ongoing maintenance
• Manage identity & access (auth issues, access reviews, anomalous logins)
• Work through an existing backlog of security findings

Key Skills & Experience

• Strong hands-on Azure experience
• Solid systems administration background
• Generalist security analyst / threat-hunting experience
• Comfortable working inside a development environment — understands dev workflows, tooling, and how to support engineers
• Experience owning incidents from detection to resolution, without escalating to a higher tier
• English Upper-Intermediate Level

Nice to Have:

• Experience in healthcare, fintech, or other compliance-sensitive environments

What we offer:

• 18 working days of paid vacation a year
• Plus 3 days of additional vacation for childbirth and marriage
• 7 days of paid sick leave per year
• 7 public holidays off
• Corporate team-building events & celebrations
• English classes covered by the company
• Healthcare program
• Access to learning: internal/external, certification compensation
• Development roadmaps and plans to support your professional growth
• Regular performance reviews
• Full accounting support
• Participation in the IT Cluster

We are seeking a highly analytical and detail-oriented Security Data Analyst to join our Information Security team. The successful candidate will be pivotal in safeguarding our digital assets by analyzing security data, identifying threats, and providing actionable insights to strengthen our security posture. This role combines expertise in data analysis with a deep understanding of cybersecurity principles.

Main Responsibilities

Data Loss Prevention (DLP) Management

– Manage Data Leakage Prevention tool and processes end-to-end

– Designing, implementing, and supporting new DLP rules

– Focus on reducing false positives from DLP tools to improve accuracy

– Monitor the DLP dismissal process and handle custom requests

– Conduct thorough DLP testing and validation

Security Control & Risk Management

– Design, implement, and support robust data security controls

– Manage data security projects from inception to deployment

– Performing security assessments (data security perspective) on systems and applications

– Analyze requests and approving data transfer or critical access based on security policies

– Create detailed security hardenings guides and provide system configuration requireme

Data Analysis & Reporting

– Investigate security alerts, logs, and data from SIEM and DLP systems

– Perform in-depth analysis of large security datasets

– Develop and maintain key security metrics, perform audits and report for management

Security Incident Analysis & Response

– Conducting analysis for data security incidents and providing support for L3 SOC activities

– Responding to urgent incidents outside working hours as part of an on-call rotation

– Contribute to incident response by providing rapid data analysis and forensics support

Mandatory Requirements

Technical Proficiency

– 3+ years of experience in a cybersecurity role, specifically in data analysis, SOC/incident response

– Hands-on experience with DLP technologies (e.g. Symantec)

– Strong knowledge of SIEM/Logging platforms (e.g. Elastic) and log aggregation principles

– Proficiency in scripting languages (e.g., Python, PowerShell) for data manipulation and automation

– Familiarity with network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure)

– Knowledge of privacy and data protection regulations

Analytical Skills:

– Proven ability to collect, analyze, and interpret complex technical data to solve security problems

– Excellent problem-solving skills and attention to detail

English: intermediate or higher

Ukrainian/Russian: native or advanced

Education: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience

We offer

Vacation: Reset. Recharge. Come back stronger.

Sick Leave Allowance: Health is power. We designed the system to support you

Benefits Model: Your budget, your rules – spend it where it counts. Day one, it’s yours. No waiting, no barriers

Motivation Bonus System: We see results. We reward drive. Our bonus system fuels performance and celebrates dedication – because excellence deserves recognition

Training Balance: Learn fast. Grow faster. Upskill, stay ahead, and keep your edge sharp

Team Building: Stronger together. We connect, compete, and celebrate – great teams don’t happen by accident

Generation Program: Focused on boosting the potential of children within our families

Work & Fun Balance: Driven at work, alive beyond it. Events, surprises, and shared moments keep our spirit high and our energy unstoppable

As a Senior Cyber Security Analyst, you will join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role combines threat analysis, traffic investigation, detection engineering, and collaboration with customers and internal engineering teams to improve protection mechanisms and threat visibility.

You will work with high-volume traffic datasets, analyze suspicious behavior patterns, and contribute to the continuous improvement of security detections related to bots, fraud attempts, and other web-based threats.

Customer

Our client delivers advanced cybersecurity solutions designed to protect organizations, users, and digital ecosystems from evolving online threats. The company specializes in bot defense and anti-malvertising technologies for the AdTech industry, supporting SSPs, DSPs, agencies, and publishers through scalable protection platforms, customizable reporting tools, and API integrations.

Project

The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Cyber Security Analysts collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

Requirements

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field
• Strong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions
• Experience in web security research, bot management, fraud detection, or related domains
• Hands-on experience with threat investigations, IOC analysis, and threat intelligence research
• Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools
• Strong SQL skills, including working with large datasets and UDFs
• Basic knowledge of JavaScript for web and client-side analysis
• Strong analytical and problem-solving skills
• Ability to work independently and manage investigations with minimal supervision
• Strong communication and collaboration skills
• Passion for cybersecurity and continuous learning

NICE TO HAVE:

• Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs
• OSINT and cyber threat intelligence research experience
• Python and Jupyter Notebook experience for investigations and automation

• Experience with GitHub and version control workflows

  Responsibilities

• Monitor and investigate potential security threats using tools such as Kibana/OpenSearch and Snowflake.
• Analyze security logs and investigate suspicious or unusual activity, including spikes in traffic, unexpected changes in attack patterns, and new or disappearing attack signals.
• Determine whether detected activity is malicious or benign and identify the appropriate response, including detection engineering to block malicious activity when needed.
• Develop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity.
• Monitor existing detections and known attack patterns to make sure they continue to work as expected and identify any unusual changes in volume, sources, IPs, domains, or other indicators.
• Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules.
• Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage.
• Document newly discovered threats and attacks, including evidence, findings, and indicators.
• Communicate findings to Engineering and other stakeholders and provide the necessary technical details to support remediation and improvements to detection and protection mechanisms.
• Partner directly with counterparts through a ticketing system and support portal to investigate issues, provide updates, and resolve security-related requests.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for an Antifraud Analyst Middle

Requirements

• Experience in security, anti-fraud management, or in the casino/gaming industry – from 1+ years;
• Knowledge of the specifics of online casinos, traffic acquisition (understanding the process), KYC, payment systems, and mechanisms related to gaming transactions;
• Experience with analytical tools and dashboards;
• Experience working with anti-fraud systems (e.g., betting monitoring, suspicious transactions);
• Ability to identify fake accounts, bonus abuse, and money laundering schemes;
• Knowledge in combating multi-accounting, bot attacks, and card fraud.

Will be plus

• English (not necessary at the moment as there is no interaction with English-speaking regions);
• Experience in support, payments

Responsibilities

• Monitoring transactions and accounts: Analysis of gaming and financial transactions for liability purposes (fraud, multi-accounting, money laundering, bonus hunting, etc.);
• Use anti-fraud systems to detect anomalies, such as bonus manipulation, fake bets, or fraudulent identification data;
• Preparation of reports and analysis of data on identified risks and incidents;
• Analysis of bonus offers;
• In-depth analysis of gaming behavior for fraud (search for syndicates, potential collusion in poker/live games, use of bots/software);
• Identification of complex bonus hunting schemes (Bonus Abuse) and development of countermeasures;
• Independent setup, testing, and optimization of triggers/rules in anti-fraud systems;
• Data export and analysis using product reports, as well as export from an anti-fraud tool;
• Working with BI tools (Tableau) to identify anomalies in player behavior;
• Conducting comprehensive investigations of major fraud incidents;
• Basic understanding of AML (anti-money laundering) requirements and regulatory licenses;
• Analysis of the causes of changes in risk metrics.

 Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location

We are looking for an IT Compliance Analyst/Information Security GRC Analyst to join our Security team and help strengthen the effectiveness and transparency of our security controls.

In this role, you will work across security compliance, control assurance, third-party risk, and security awareness. You will collaborate with Security, Legal, Procurement, technical and business teams to ensure controls are supported by reliable evidence, risks are identified and tracked, and the organization remains ready for audits and regulatory requirements.

This is a great opportunity for someone who enjoys hands-on GRC work, wants to take ownership of processes, and is interested in developing expertise across multiple areas of information security compliance.
 

Responsibilities

• Collect, validate, organize, and maintain audit and security-control evidence
• Test assigned security controls, identify gaps, and prepare clear and traceable evidence packages
• Support internal and external audits, including SOC 2, DORA, and CySEC-related assurance activities
• Maintain control records, evidence repositories, findings, remediation actions, owners, and deadlines
• Perform third-party security assessments, including supplier tiering, due diligence, questionnaire reviews, and analysis of assurance evidence
• Assess security risks related to SaaS providers, ICT providers, outsourced services, and critical vendors
• Track supplier findings, treatment plans, reassessment dates, and remediation progress
• Collaborate with Security, Procurement, Legal, technical teams, and business stakeholders
• Support security-awareness campaigns, employee onboarding, phishing simulations, and role-based training
• Maintain awareness and training completion data and follow up on outstanding actions
• Prepare clear, evidence-based compliance and security-risk reporting
• Escalate control gaps, overdue evidence, critical supplier findings, and other significant risks through established processes
   

Requirements

• Experience in IT compliance, Information Security GRC, IT risk, IT audit, third-party security risk, or a related field
• Hands-on experience collecting, validating, and maintaining audit and control evidence
• Understanding of security controls and experience with control testing, gap identification, and remediation tracking
• Knowledge of information security and assurance frameworks such as SOC 2, ISO 27001, NIST, CIS Controls, or similar
• Understanding of risk assessment and risk treatment principles
• Ability to maintain accurate control records, findings, remediation actions, owners, and deadlines
• Strong attention to detail and ability to work with sensitive information
• Clear written and verbal communication skills with both technical and non-technical stakeholders
• Good English communication skills
   

Will be a plus

• Experience with SOC 2, DORA, CySEC, or other financial-services regulatory requirements
• Experience with third-party/vendor security risk management, including supplier assessments, security questionnaires, and due diligence
• Experience with GRC platforms such as ServiceNow GRC, OneTrust, Archer, Vanta, Drata, Hyperproof, or similar
• Experience preparing or delivering security awareness activities, phishing simulations, onboarding, or role-based security training
• Relevant certifications such as CISA, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, or similar
• Experience supporting internal or external audits
• Experience working in FinTech, financial services, SaaS, or another regulated environment
   

We offer

• 20 paid vacation days per year 
• 10 paid sick leave days per year 
• Public holidays as per the company's approved Public holiday list 
• Medical budget 
• Opportunity to work remotely 
• Professional education budget 
• Language learning budget 
• Wellness budget (gym membership, sports gear and related expenses)