Head of Risk and Audit

About the role

The Head of Risk and Audit will build a group‑wide internal audit and Enterprise Risk Management (ERM) function from the ground up. Reporting to the VP of Legal with a dotted‑line to Compliance leadership, the role retains Board‑level exposure and independence to audit teams across the organisation. The remit is global, including Canada, and requires strategic vision combined with hands‑on delivery.

Key responsibilities

• Develop and execute a risk‑based internal audit plan covering operational, technical, financial, and regulatory domains.
• Deliver objective audit reports, root‑cause analyses, and remediation tracking to the Board and senior leadership.
• Run targeted audits on high‑risk gambling areas such as RNG fairness, player funds, bonus abuse, payments, and affiliates.
• Maintain and evolve ERM frameworks, risk registers, and operational risk‑appetite standards.
• Ensure compliance with Gibraltar Gambling Commissioner requirements and other regulators (UKGC, MGA).
• Independently audit AML/CTF, KYC, and Responsible Gambling frameworks in partnership with Compliance and the MLRO.
• Evaluate vendor risk, platform reliability, data‑privacy practices, and IT security protocols.
• Partner cross‑functionally to strengthen controls and proactively mitigate risk.

Required profile

• 5+ years senior audit leadership experience within online gambling or iGaming.
• Deep knowledge of Gibraltar gambling regulation and international compliance regimes (UKGC, MGA).
• Recognised audit/accounting/risk qualification (CIA, ACA, ACCA, CIMA, CISA, IRM).
• Proven track record reporting to Audit Committees/Boards and senior stakeholders.
• Ability to operate independently with high integrity and sound judgement.
• Strong communication, negotiation, and report‑writing skills.
• Based in Gibraltar or willing to relocate.

Required skills