<p><span class="NormalTextRun SCXW240505100 BCX8">This role is a key </span><span class="NormalTextRun SCXW240505100 BCX8">component</span><span class="NormalTextRun SCXW240505100 BCX8"> of the security governance and assurance function within the InfoSec team.</span></p> <h2><strong>The Wow</strong></h2> <p><span class="LineBreakBlob BlobObject DragDrop SCXW67043827 BCX8"><span class="NormalTextRun SCXW240505100 BCX8">The role ensures security controls are defined and implemented by key partners across </span><span class="NormalTextRun SpellingErrorV2Themed SCXW240505100 BCX8">Betsson</span><span class="NormalTextRun SCXW240505100 BCX8"> Group and includes </span><span class="NormalTextRun SCXW240505100 BCX8">maintaining</span><span class="NormalTextRun SCXW240505100 BCX8"> a standard security control framework (ISO27001) captured in </span><span class="NormalTextRun SpellingErrorV2Themed SCXW240505100 BCX8">Betsson’s</span><span class="NormalTextRun SCXW240505100 BCX8"> portfolio of security policies, procedures, and standards. </span><span class="NormalTextRun SCXW240505100 BCX8">Ultimately, this</span><span class="NormalTextRun SCXW240505100 BCX8"> advisory role, carries the responsibility for all aspects of security governance, </span><span class="NormalTextRun SCXW240505100 BCX8">risk</span><span class="NormalTextRun SCXW240505100 BCX8"> and compliance with a particular focus on security-related compliance and regulatory matters.</span></span></p> <h2><strong>A taster of what you will be involved with: </strong></h2> <ul> <li>Develop methods to monitor and measure security assurance and governance efforts. </li> <li>Maintain and uphold system ISO27001 and PCI-DSS assurance accreditation materials. </li> <li>Conduct technical security assessments of application, system or network, documenting the security posture and conformance to Betsson’s security control framework. </li> <li>Partake in security configuration reviews to ensure applications, networks and systems are compliant with policies and standards. </li> <li>Ensure policies, procedures, and standards are current whilst also developed, reviewed and updated periodically. </li> <li>Interface with external auditors in preparation for novel gaming license applications, and during ISMS audits by providing supporting evidence and coordinating meetings as necessary. </li> <li>Interface with various teams to manage information security related audits, findings and remediation actions. </li> <li>Maintain, follow-up and communicate the Security Risk Register together with internal stakeholders. </li> <li>Manage and maintain the Corrective Action Plan. </li> <li>Coordinate and participate in Business Continuity Table-top exercises. </li> <li>Participate in security due diligence assessments for new vendors or service providers. </li> <li>Participate in the execution of a Security Awareness Programme. </li> <li>Act as a central point of reference for all matters concerning Security Governance, Risk and Compliance and act as an ambassador for good security governance. </li> <li>Additional responsibilities pertaining to security governance may be allocated at the discretion of the Security Governance Manager, in alignment with the evolving requirements of the organization</li> </ul> <h2><strong>What we are looking for</strong></h2> <ul> <li>3/4+ years’ progressive experience in Security, Governance, Risk, Compliance or related professional area </li> <li>3/4+ years’ experience working with enterprise security risk management frameworks and processes (e.g., ISO2700X, NIST, Cloud Security Alliance) </li> <li>3/4+ years’ experience in facilitating and conducting security assessments related to PCI-DSS, ISO27001, NIST 800-53 and Cybersecurity Framework audits</li> <li>Strong verbal and written communication skills with the ability to articulate and interpret legal obligations and security requirements </li> <li>Knowledge of business environments and service requirements, particularly in sectors like gaming or hospitality. </li> <li>Experience working with cross functional, sourced, or matrixed teams </li> <li>Proven ability to effectively prioritize and execute tasks in a high-pace environment </li> <li>Familiarity with GRC systems and processes, strong organizational skills, and problem resolution abilities. </li> <li>Experience in business systems and process planning </li> <li>Project management skillset and a can-do attitude </li> </ul> <h2><strong>What we offer</strong></h2> <p>Much like riding a rollercoaster, sometimes life at Betsson can be lightning fast with twists and turns but always FUN! Then again, what else would you expect from a business 75% millennial and 1700 strong, spread across 7 offices with 900 based out of our Malta HQ alone! We recognise it may not be for the faint-hearted, but if you’re a go-getter, initiator and adrenaline junkie, always striving to push the boundaries and challenge yourself, then you’ll fit right in.</p> <p style="text-align: center;"> </p> <h2>Challenge accepted?</h2> <p><strong><em>By submitting your application, you understand that your personal data will be processed as set out in our <a href="https://eur01.safelinks.pr