Internal Compliance Auditor

RiskCherry is an accredited, independent iGaming Testing, Inspection and Certification (TIC) laboratory. We test and certify casino games, platforms and Random Number Generators (RNGs) for game studios around the world.

We are ISO/IEC 17025 and ISO/IEC 17020 accredited, and ISO/IEC 27001 and ISO 9001 certified. Our teams in Malta and Bulgaria work across regulatory compliance, game verification, certification automation and AI-supported tooling.

Our promise is simple: Certification Made Simple. Behind that promise sits a lot of structure, evidence, standards, audits, controls and very careful people making sure the system works as it should.

🎯 About the Role

RiskCherry is looking for an Internal Compliance Auditor to support and strengthen our internal audit framework, integrated management system and accreditation readiness.

This is a hands-on management-system assurance role. You will review documentation, run internal audits, track findings, follow up on corrective actions, support external audits and help ensure our processes continue to meet ISO, accreditation and regulatory requirements.

This is not a box-ticking audit role. It is also not a generic admin compliance job.

🔎 What This Role Is, And Is Not

This role is focused on:

• Internal audits and management-system assurance.
• ISO and accreditation compliance.
• Risk-based reviews, internal controls and corrective actions.
• Notifications of Change and requests for extension of accreditation scope.
• Supporting external assessments by accreditation and certification bodies.

This role is not focused on:

• AML/KYC or player protection.
• Financial compliance.
• Legal contract review.
• Game testing or product testing.
• Pure technical compliance delivery for client products.

You will need to understand how our iGaming testing and certification work fits together, but your main job is to make sure our internal management system remains effective, compliant and audit-ready.

⚒️ What You’ll Do

Management System Compliance Assurance

• Review RiskCherry’s management-system documentation and validate that it continues to conform with applicable ISO, accreditation, regulatory and internal requirements.
• Assess conformity with standards and frameworks including ISO/IEC 27001, ISO 9001, ISO/IEC 17020, ISO/IEC 17025 and ISO/IEC 17065.
• Review policies, processes, procedures, records and controls for accuracy, completeness and practical effectiveness.
• Support the compliance team with guidance on ISO and accreditation-related requirements when new cases or questions arise.

Internal Audits, Risk and Corrective Actions

• Follow and support the internal audit programme and audit framework.
• Plan, perform and document risk-based internal audits across the organisation.
• Prepare clear, evidence-based internal audit reports.
• Identify gaps, nonconformities, risks and improvement opportunities.
• Work with domain owners and management team members to agree practical corrective actions.
• Track actions through to timely closure and verify that solutions are implemented correctly.
• Review the risk register, risks and opportunities, internal controls and process effectiveness.
• Identify recurring issues and help turn findings into better ways of working.

Accreditation and External Audit Support

• Prepare Notifications of Change and requests for extension of accreditation scope for accreditation bodies.
• Coordinate, communicate and participate in audits with external accreditation and certification bodies.
• Help ensure external audit evidence, management-system records and corrective-action documentation are accurate and ready.
• Support follow-up activities after external assessments and help translate findings into meaningful improvements.

Tools and Daily Work

You will spend time in documentation, evidence and workflow systems such as Google Workspace, Jira, Confluence, shared registers, policies, procedures, audit plans and assessment records.

✅ What We’re Looking For

We are looking for someone who understands that mandatory requirements are not optional, and that good auditing is not about catching people out. It is about understanding the process, the risk, the evidence and the fix.

You should bring:

• At least 1 year of experience in iGaming audit, technical or regulatory compliance, internal audit, quality, information security, law, IT, or another regulated environment.
• A clear connection to compliance, regulation, accreditation, law, IT or management systems.
• Understanding of compliance, risk-based auditing and internal controls.
• Strong analytical and investigative skills, with excellent attention to detail.
• Ability to read, understand and apply technical standards and procedural requirements.
• Solid IT literacy, including confident use of Google Workspace, Sheets, Jira, Confluence or similar systems.
• Interest in how technology works, including computers, servers, platforms, games and information security controls.
• Excellent written and spoken English.
• Professional integrity, sound judgement and the confidence to communicate findings clearly.
• Ability to work independently while collaborating with operational teams and senior management.
• The ability to stay detailed without losing sight of the bigger regulatory and accreditation picture.

A background in Law, Information Technology, software, information security, compliance or a related discipline is an advantage, but not essential where equivalent professional experience can be demonstrated.

🍀 A Plus to Have

Experience or qualifications in any of the following would be especially valuable:

• ISO/IEC 27001, ISO 9001, ISO/IEC 17020, ISO/IEC 17025 or ISO/IEC 17065.
• Internal auditor or lead auditor training.
• Information security, governance, operational risk or quality management.
• Working with gambling regulators, accreditation bodies or certification bodies.
• iGaming platforms, casino games, RNGs, technical compliance or product assessment processes.
• Coding, testing, scripting, data analysis or deeper hands-on IT experience.

🚀 Why Join RiskCherry

• Make a real impact: Help strengthen the internal audit framework and management system of an accredited iGaming TIC laboratory.
• Learn a highly specialised field: Build knowledge across ISO standards, accreditation, conformity assessment, regulatory requirements and iGaming certification.
• Go beyond the checklist: Turn audit findings into practical improvements that make the company stronger.
• Work close to the business: Collaborate with compliance, technical, quality, product assessment and management teams.
• Join a lean, high-trust team: We value curiosity, ownership, clear communication and attention to detail.
• Grow with us: We are building smarter internal tools, automation and AI-supported certification workflows, so there is plenty to learn and improve.

💎 What We Offer

• Competitive remuneration aligned with your experience and expertise.
• Additional health insurance, including dental care.
• Personalised development plans and clear growth paths.
• E-learning, trainings and support for professional development.
• Access to modern tools, including AI-supported workflows.
• A modern office on central location.
• Flexible start of the working day.
• Limited home office flexibility, with regular office presence expected.
• Team events and a friendly, curious, slightly nerdy environment.

📍 Location

This role can be based in Sofia or in Ruse, Bulgaria, with regular presence in office.

Only short-listed candidates will be contacted for an interview.

By applying, you acknowledge that your personal data will be processed in line with our Privacy Policy at https://www.riskcherry.com.