Information Security Governance Manager

2 settimane fa


Milan, Italia Altro A tempo pieno

About us : Flutter, the world’s largest online sports betting and iGaming group listed on the London and New York stock exchanges, is home to the Southern Europe & Africa (SEA) region, featuring iconic brands like Sisal and PokerStars, a globally loved brand that embodies innovation and ambition, with significant growth potential in a dynamic market.Your role : Responsible for establishing, maintaining, and overseeing the organization’s security governance framework, in alignment with Flutter Group requirements. Ensure that security policies, standards, and controls are aligned with business objectives, regulatory obligations, and risk management practices. The role involves designing security governance processes, monitoring compliance, driving security awareness initiatives, managing audits, and providing leadership to ensure that the organization’s practices are effectively managed in line with best practices and standards.What you’ll do :Establish, maintain, and continuously improve the organization’s Information Security Governance framework, ensuring alignment with Flutter Group standards, business objectives, and regulatory obligations (GDPR, SGAD, WLA-SCS, NIS2, etc.).Define, update, and enforce security policies, standards, and controls, ensuring effective adoption across the organization.Lead governance processes by monitoring compliance, performance indicators, and operational gaps, and by driving corrective actions and continuous improvement initiatives.Manage internal and external audits, regulatory assessments, and security reviews, ensuring accurate documentation and timely remediation.Collaborate with IT, Legal, Compliance, and cross-functional business units to support governance initiatives, process enhancements, and risk-based decision-making.Promote a strong security culture by developing awareness programs, supporting training activities, and contributing to phishing simulation campaigns.Build and maintain relationships with key internal and external stakeholders to ensure effective communication, engagement, and alignment on security governance priorities.Support consistent execution of security governance practices, processes, and standards across all Flutter SEA subsidiaries (Turkey, Albania, Morocco, France, Spain, Portugal).What you’ll bring :Experienced as a professional working in cybersecurity, governance, risk, and compliance (GRC) disciplines with exposure to complex or international environments.Demonstrative experience of managing or supporting the implementation and maintenance of information security governance frameworks, including policies, standards, and regulatory compliance , end-to-end.A proven ability to deliver effective information security governance and support organizational objectives, to analyse complex security issues, make sound decisions, and communicate clearly with stakeholders at all levels and to develop, implement, and maintain security policies, standards, and governance.Excellent written and verbal communication skills in English; knowledge of additional languages is a plus.Strong skills in :Communication, problem-solving, and stakeholder management.Organizing, prioritizing, and delivering work effectively.Developing and managing security policies, standards, and governance frameworks.Evaluating compliance and supporting audit activities.Understanding security controls, frameworks (e.g., ISO 27001, NIST), and governance processes.In-depth knowledge of :Information security governance frameworks, including ISO 27001, NIST, and related standards.Security policies, risk management practices, and compliance requirements.Relevant laws and regulations such as GDPR, data protection principles, and industry compliance obligations (WLA-SCS, NIS2).Security controls, risk assessment methodologies, and governance best practices.Why choose us :Permanent contract with Hybrid Work;Meal Allowance;Supplemental Health Insurance;The option to join our company share saving scheme.Choose us also for :An inclusive work environment and participate in all our initiatives focused on Diversity & Inclusion;Well-Being Support : online meditation courses, medical online service and counselling with the help of certified psychologists and coaches;Learning and Development : access a platform full of training courses, join workshops, conferences. Exploit our FlexiLearning program, which allows you to dedicate at least 4 working hours per month for your professional growth;Parental Leave Packages : additional support for you, children and financial aid for mothers;Volunteering during your working hours.Much more about us :Have a look at our amazing blog Inside : hear directly from our employees at the following link :Reviews and comments from our and pages. Put yoursEqual Opportunity Flutter is an Equal Opportunity Employer. Diversity and Inclusion are fundamental values for us. We welcome any candidate without distinction of age, culture, religion, ethnicity, sexual orientation, gender identity and expression.Location: Milano.#J-18808-Ljbffr



  • Milan, Italia Sisal A tempo pieno

    About us: Flutter, the world’s largest online sports betting and iGaming group listed on the London and New York stock exchanges, is home to the Southern Europe & Africa (SEA) region, featuring iconic brands like Sisal and PokerStars, a globally loved brand that embodies innovation and ambition, with significant growth potential in a dynamic market. Your...


  • Milan, Italia Altro A tempo pieno

    About us :Flutter, the world’s largest online sports betting and iGaming group listed on the London and New York stock exchanges, is home to the Southern Europe & Africa (SEA) region, featuring iconic brands like Sisal and PokerStars, a globally loved brand that embodies innovation and ambition, with significant growth potential in a dynamic market.Your...


  • Milan, Italia Altro A tempo pieno

    A leading iGaming group in Milano seeks a professional to oversee its Information Security Governance framework. Responsibilities include managing security policies, compliance, audits, and fostering awareness. Ideal candidates will have extensive experience in cybersecurity with a strong ability to analyze and communicate complex issues. The role offers a...

  • GRC Consultant

    4 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    4 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    2 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    2 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • Cyber Security Strategy

    2 settimane fa


    Milan, Italia Altro A tempo pieno

    Cyber Security Strategy & Organization ExpertJoin to apply for the Cyber Security Strategy & Organization Expert role at Accenture ItaliaCertificazioni richieste:Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Certified Business Continuity Manager (CBCM)Certified Information Systems Auditor...

  • Cyber Security Strategy

    2 settimane fa


    Milan, Italia Altro A tempo pieno

    Cyber Security Strategy & Organization Expert Join to apply for theCyber Security Strategy & Organization Expertrole atAccenture ItaliaCertificazioni richieste:Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Certified Business Continuity Manager (CBCM)Certified Information Systems Auditor (CISA)ISO27001...


  • Milan, Italia P4I - Partners4Innovation - A DIGITAL360 Company A tempo pieno

    Partners4Innovation (P4I) è parte del Gruppo DIGITAL360, che conta al suo interno 1200 persone distribuite in più di 40 società localizzate in 8 paesi del mondo, supporta attraverso le sue tre business unit Imprese e Pubbliche Amministrazioni in percorsi di trasformazione digitale, per favorirne la crescita e lo sviluppo sostenibile, rendendo le persone...