InfoSec Manager

Location:
Based in Malta
- Employee or Remote from Europe Reporting to CTO Direct Reports: Penetration Tester Your Impact Security Engineering & Architecture
• Design and implement security controls across infrastructure, endpoints, identity, and cloud environments using secure-by-design and Zero Trust principles.
• Build security into the way the team ships software, partnering with engineering on threat modeling, secure code practices, and security guardrails in CI/CD pipelines.
• Evaluate, deploy, and tune security tooling, automating detection, response, and compliance checks wherever possible.
• Keep pace with the threat landscape, including ransomware, supply chain attacks, social engineering, and AI-enabled threats, and adapt the defenses to match. Security Operations & Defense
• Own identity and access management: SSO, phishing-resistant MFA, least privilege, and privileged access controls.
• Harden and monitor endpoints and devices (EDR/XDR, MDM).
• Define network security standards and validate them with IT (firewalls, VPN/ZTNA, segmentation).
• Run vulnerability and patch management with risk-based prioritization, and drive fixes to closure.
• Secure email, SaaS, and collaboration platforms, and lead the phishing defense program.
• Operate and improve detection and monitoring (SIEM, DLP, alerting) to reduce noise and catch what matters.
• Lead incident response end to end: detection, containment, investigation, root cause analysis, and lessons learned.
• Plan penetration tests and red team exercises, and own remediation. Governance, Risk & Compliance
• Build and maintain the information security management system, aligned to ISO 27001.
• Identify, assess, and manage cyber risk across the group, and translate it into clear, business-focused reporting for leadership.
• Keep compliant with the regulations that matter: GDPR, PCI DSS, DORA, and relevant gaming and financial regulations.
• Write practical security policies and standards that people will actually follow.
• Lead audits, certifications, and security questionnaires from partners and regulators.
• Run third-party and vendor risk assessments.
• Build a security-aware culture through engaging training, phishing simulations, and awareness materials. Leadership & Process
• Lead and mentor the security team, starting with one penetration tester. What Makes You a Fit
• 5+ years of progressive experience in cybersecurity with a strong balance between hands-on technical implementation and governance, risk, and compliance (GRC).
• A solid background in security engineering: you’ve designed, built, and operated security controls, not just documented them.
• Strong technical grounding across identity, endpoints, networking, cloud, and security tooling.
• Proven experience with risk assessments, audits, and incident response, ideally including real incidents.
• Experience with at least one recognized framework (ISO 27001, SOC 2, NIST CSF, CIS Controls, or similar).
• Good knowledge of GDPR and at least one of PCI DSS, DORA, or a sector-specific regulatory framework.
• Background in iGaming is mandatory.
• Ability to explain cyber risk clearly to engineers, executives, and regulators.
• Leadership

experience:
you’ve managed or mentored at least one team member and want to build a team.
• Comfort working independently in a fast-paced, high-ownership environment. Nice to have
• Experience securing production systems and AWS environments (IAM, GuardDuty, Security Hub, cloud security posture management).
• Scripting or automation skills (Python, Bash, infrastructure as code).
• Certifications such as CISSP, CISM, OSCP, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty. What's in it for you? ✨ Be with a team that builds the momentum that moves the industry. A fast-paced environment driven by innovation, curiosity, and a shared love for technology. A people-first culture that rewards ambition, integrity, and genuine collaboration. Comprehensive benefits package for Malta-based employees, including:
• Private health insurance, wellness allowance, and communication allowance.
• Healthy lunch on Wednesdays and a varied calendar of social events throughout the year..
• Employee discounts in restaurants and businesses.
• Extended second-parent leave policy.
• Private parking space. This opportunity is powered by Bet On Talent
- Applying through us is your ultimate VIP pass 💎 We work deeply within our partner's ecosystem, which means we skip the generic applicant piles and fast-track

your profile
straight to the team
- Hit apply now and let's make your next big career move happen