InfoSec Manager

Our client is seeking an experienced InfoSec Manager to play a crucial role in safeguarding their digital assets and maintaining trust among customers and stakeholders. This role is responsible for ensuring the integrity, confidentiality, and security of information systems within the organization.

Key Responsibilities:

1. Security Strategy and Policy Development

• Develop and implement a comprehensive information security strategy aligned with the company’s objectives and regulatory requirements within the iGaming industry.
• Establish and maintain security policies and procedures to protect systems and data from cyber threats.

2. Risk Management

• Conduct regular risk assessments to identify vulnerabilities within IT infrastructure and data management practices.
• Develop risk mitigation strategies and prioritize security initiatives based on potential impact and likelihood of threats.

3. Compliance and Regulatory Adherence

• Ensure compliance with national and international regulations, including GDPR, PCI DSS, and iGaming-specific legislation.
• Stay informed of new regulations and industry standards, updating policies and practices as necessary.

4. Incident Response and Management

• Develop and maintain an incident response plan to address security breaches or data leaks effectively.
• Lead incident response efforts, coordinating with IT, legal, and communications teams to mitigate damage and ensure transparent communication.

5. Security Awareness and Training

• Implement an ongoing security awareness training program for employees to recognize and prevent security threats.
• Conduct regular training and simulations to educate staff on phishing and social engineering tactics.

6. Data Protection and Privacy

• Oversee the protection of sensitive customer data, ensuring encryption, access control, and data integrity measures are in place.
• Work closely with the legal team to ensure data handling practices comply with privacy laws and regulations.

7. Cybersecurity Technologies

• Evaluate, select, and implement security technologies such as firewalls, intrusion detection systems, and encryption tools.
• Stay updated on emerging security technologies and assess their applicability within the iGaming industry.

8. Vendor and Third-Party Risk Management

• Assess and monitor the security practices of third-party vendors and partners.
• Implement security requirements and conduct regular audits of third-party providers to manage risk exposure.

9. Security Monitoring and Analytics

• Oversee the continuous monitoring of networks and systems for security breaches or anomalies.
• Utilize security information and event management (SIEM) tools to analyze security logs and detect potential threats.

10. Budget and Resource Management

• Develop and manage the information security budget, ensuring effective allocation of resources.
• Advocate for necessary security investments to senior management, demonstrating the value and necessity of security initiatives.

11. Crisis Management and Communication

• Prepare crisis management plans for significant security incidents and lead the response to minimize business impact.
• Coordinate communication with internal and external stakeholders to maintain trust and transparency.

Required Experience:

• 5+ years of experience in the Crypto or iGaming industries.

Required Skills & Qualifications:

• Proven experience in IT security management, with a strong technical background in network security, vulnerability management, and incident detection and response.
• Deep understanding of cybersecurity threats, data protection laws, and the technical aspects of information security.
• Knowledge of services such as Microsoft Office, Atlassian, and Fortinet firewalls.
• Experience leading and managing cross-functional teams, including subcontractors.
• Hands-on technical expertise with basic programming knowledge and a willingness to engage in technical work.
• Familiarity with regulatory compliance requirements and experience in writing security guidelines and policies.
• Strong analytical and problem-solving skills, with a focus on risk management and incident response.
• Fluency in Russian and proficiency in English.
• Ability to independently identify problems and propose solutions with a strategic approach.
• Capability to work in a fast-paced environment and handle pressure effectively.
• Strong communication skills and a high level of emotional self-management.

What Our Client Offers:

• Fully remote work out of Malta or Cyprus
• A challenging and dynamic role in the iGaming industry.
• Competitive salary and a collaborative work environment with great colleagues.