.Description Scopely is looking for a Sr. Manager, Security Risk Manager to join the Information Security team remotely in Europe!At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily. What You Will Do Assess compliance with internal security controls to ensure adherence to company policies and standards Oversee the periodic review and governance of security policies and standards documents, ensuring they are current, effective, and appropriately governed Manage the entire lifecycle of security risks from identification and assessment through mitigation, monitoring, and reporting Support the continuous improvement of security controls, aligning them with NIST and ISO security framework Conduct internal risk assessments to identify and address potential security risks across the organization Recommend proactive improvements and strategic initiatives to address emerging security risks Identify opportunities to leverage automation and AI for streamlining risk assessments, audits, and reporting processes Perform third-party business partner risk assessments using our internal security questionnaire, evaluating the security posture of partners and service providers Facilitate risk-gathering sessions to maintain a comprehensive understanding of the risk landscape and update the risk register accordingly Manage and respond to external assessments requested by consulting firms, insurance underwriters, licensors, and business relationships that require security and data privacy evaluations Collaborate with our parent company's internal audit team, as needed, to support and align with broader security and compliance objectives Document and report on findings from external assessments, providing actionable insights and recommendations to stakeholders Maintain and update the risk register, ensuring it accurately reflects current risks, mitigation strategies, and status updates Prepare regular reports for senior leadership on the status of security risks, compliance, and assessment outcomes Develop and monitor key metrics related to security risk management, identifying trends and improvement areas What We're Looking For Bachelor's degree in Information Security, Computer Science, or a related field or equivalent experience 6+ years of experience in security risk management, compliance, or related fields. Strong knowledge of NIST, ISO 27001 / 27002, and other security frameworks. Experience conducting internal and third-party risk assessments. Familiarity with maintaining a risk register and developing risk management reports for senior leadership