Someone is using my Game Center account; how can I secure it?
I guess his device is still logged in with your credentials, and even if  you changed the email address or password, his device is still mantaining the session active.

I don't think there's a way to log him off remotely. It seems to me that the only way is a manual log-out on his device.