Key Responsibilities

1. Information Security Governance

• Develop, implement, and maintain the company’s Information Security Management System (ISMS).
• Establish and update security policies, procedures, and standards in line with ISO 27001, GDPR, and other relevant frameworks.
• Conduct regular risk assessments, audits, and vulnerability analyses across systems and networks.

2. Cybersecurity Operations

• Oversee detection, investigation, and response to cybersecurity incidents.
• Implement and monitor security tools such as firewalls, intrusion detection systems, and endpoint protection.
• Ensure timely patch management and secure configuration of systems and applications.

3. Data Protection and Compliance

• Work with Legal and Compliance teams to ensure adherence to GDPR, data privacy laws, and licensing jurisdiction requirements (e.g., Malta Gaming Authority, Curaçao eGaming).
• Develop data classification and retention policies to safeguard sensitive information.
• Lead awareness and training initiatives to promote a culture of cybersecurity across all teams.

4. Vendor and Third-Party Security

• Evaluate and monitor security practices of third-party vendors and partners.
• Ensure proper due diligence and data protection agreements are in place.

5. Business Continuity and Incident Response

• Maintain and test disaster recovery and business continuity plans.
• Lead incident response exercises and post-incident reviews to improve preparedness.

6. Continuous Improvement and Reporting

• Stay up to date on emerging threats, technologies, and best practices.
• Provide regular security reports and risk updates to senior management.
• Recommend security enhancements based on evolving business and regulatory requirements.