IT Audit and Compliance Specialist

The Riot Compliance team is committed to providing the highest quality compliance services that align with Riot's mission of putting players first. Every project we manage, every audit we conduct, and every policy we enforce must always be performed with the goal of protecting players and ensuring compliance with applicable regulations.

As a Compliance Professional, reporting to the Senior Manager of Compliance, you will ensure that Riot’s compliance frameworks are robust, scalable, and aligned with regulatory standards and security related requirements while driving efficiency through automation and project management excellence. Your role will blend deep expertise in compliance with strong project/program management skills to create a positive impact on Riot’s global operations.

Responsibilities:

• Design and implement compliance solutions to address gaps in regulatory, privacy, and security frameworks (e.g., NIST, ISO 27001, PCI-DSS)
• Establish and maintain Riot’s risk assessment and compliance monitoring programs across multiple regions and teams
• Planning, organizing, and executing compliance-related internal audits and assessments with a focus on identifying control gaps
• Advising and assisting in remediation of any identified gaps
• Coordinate resources and workflows, proactively identifying risks and bottlenecks while driving solutions
• Automate manual compliance processes to improve efficiency and accuracy
• Oversee compliance audits, ensuring adherence to internal policies and external regulatory requirements
• Analyze complex regulatory requirements to develop tailored compliance strategies for Riot
• Collaborate with product managers, engineers, and information security teams to integrate compliance controls into Riot’s products and services
• Act as a trusted advisor to internal stakeholders on compliance-related issues, providing actionable recommendations

Required Qualifications:

• 7+ years of experience in compliance, audit, privacy, or information security, including project/program management experience
• Experience coordinating cross-project activities, artifacts, rituals, and goals in the Compliance field
• Strong technical, analytical, and problem-solving skills with a proven ability to manage complex projects
• Effective communication skills with experience influencing cross-functional teams and stakeholders
• General expertise of IT environments, information security, privacy, and threat/vulnerability management
• Technical, analytical, and quantitative skills with experience using data to test assumptions/recommendations
• Expertise in compliance frameworks and standards (e.g., GDPR, NIST, ISO 27001, PCI-DSS)

Desired Qualifications:

• Bachelor’s or advanced degree in Information Technology, Business, Law, or a related field
• Experience working in industries with high compliance and security requirements, such as technology, gaming, or digital products
• Experience with enterprise systems and tools
• Professional certifications such as CISA, CISSP, CRISC, CIPP/US, CIPM, etc.
• Experience with privacy standards and regulations (GPDR, CCPA, COPPA, DSA, etc.)

For this role, you'll find success through craft expertise, a collaborative spirit, and choices that focus on your fellow Rioters, who are the customers of your work. Being a dedicated fan of games is not necessary for this position!

Our Perks:

Riot has a focus on work/life balance, shown by our open paid time off policy, in addition to other perks such as flexible work schedules. We offer medical, dental, and life insurance, parental leave for you, your spouse/domestic partner and children, and a 401k with company match. Check out our benefits pages for more information.

Riot Games fosters a player and workplace experience that values teamwork embodied by the Summoner's Code and Community Code . Our culture embraces differences as a strength, and our values are the guiding principles for how we approach work. We are committed to putting diversity and inclusion (D&I) at the center of everything we do, and promoting a fair and collaborative culture where Rioters treat one another with dignity and respect. We encourage you to read more about our value of thriving together and our ongoing work to build the most inclusive company in Gaming .

It’s our policy to provide equal employment opportunity for all applicants and members of Riot Games, Inc. Riot Games makes reasonable accommodations for handicapped and disabled Rioters and does not unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, handicap, veteran status, marital status, criminal history, or any other category protected by applicable federal and state law. We consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with applicable federal, state and local law, including the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, and the Washington Fair Chance Act.

Per the Los Angeles County Fair Chance Ordinance, the following core duties may create a basis for disqualifying candidates with relevant criminal histories:

• Safeguarding confidential and sensitive Company data
• Communication with others, including Rioters and third parties such as vendors, and/or players, including minors
• Accessing Company assets, secure digital systems, and networks
• Ensuring a safe interactive environment for players and other Rioters

These duties are directly related to essential operations, safety, trust, and compliance obligations within our organization. Please note that job duties may evolve based on business needs and additional responsibilities may be assigned as necessary to maintain operational efficiency and security.