Software Developer (Compliance)

Role overview This role sits at the intersection of software engineering and compliance within an online gaming business, building the technical evidence pipeline that lets certified products ship quickly and safely. The work spans game certification with external labs, ISO audits of platform systems, and laying the groundwork for future SOC 2 evidence.

Responsibilities - Own the end-to-end certification pipeline, replacing manual evidence collection and tribal knowledge with automated controls, versioned artefacts, and gates that fail closed. - Prepare and submit certification evidence packs to external testing labs, including build hashes, PAR sheets, configuration snapshots, and version manifests. - Respond directly to technical questions from auditors, certification labs, and assessors, assembling and presenting the evidence requested. - Track and close every deficiency raised during certification cycles before any release is allowed past the pre-release gate. - Improve the audit trail for ISO-certified platform controls and identify the gaps that will need to be filled for SOC 2. - Read production game math code to verify that runtime behaviour matches what was declared to the lab, and build tooling that makes this check repeatable.

Requirements - Three or more years writing production code, comfortable forming independent judgement from reading unfamiliar codebases. - Strong working knowledge of Node.js and TypeScript across game math, engine integration, test suites, and automation. - Prior experience building certified products at an iGaming provider, lottery, or similarly regulated business. - Demonstrated ability to turn manual, high-stakes processes into engineered pipelines with automated evidence and versioned artefacts. - Comfort with SQL against production analytics stores, log investigation, and reading metrics to distinguish real control failures from dashboard noise. - Composure under direct questioning from auditors and assessors, with the discipline to answer precisely and route regulatory or commercial questions to the right authority.

Nice to have - Direct experience working with certification labs (GLI, BMM, eCOGRA, iTech Labs) or a gaming regulator. - Hands-on evidence work for ISO 27001, SOC 2, or an equivalent information-security audit. - Familiarity with RNG and RTP mathematics and the statistical evidence behind them. - Knowledge of multi-jurisdiction licensing across UKGC, MGA, and EU or LatAm regulated markets. - Experience building automation on top of observability tooling such as Datadog.

Benefits and work setup - Remote and flexible working arrangement. - Competitive salary with quarterly bonuses. - Unlimited paid time off and unlimited paid sick leave. - Private medical insurance and financial support for life events. - Professional development budget and regular company events.