InfoSec Manager

Location: Based in Malta - Employee or Remote from Europe
Reporting to CTO
Direct Reports: Penetration Tester

Your Impact

Security Engineering & Architecture

• Design and implement security controls across infrastructure, endpoints, identity, and cloud environments using secure-by-design and Zero Trust principles.

• Build security into the way the team ships software, partnering with engineering on threat modeling, secure code practices, and security guardrails in CI/CD pipelines.

• Evaluate, deploy, and tune security tooling, automating detection, response, and compliance checks wherever possible.

• Keep pace with the threat landscape, including ransomware, supply chain attacks, social engineering, and AI-enabled threats, and adapt the defenses to match.
  

Security Operations & Defense

• Own identity and access management: SSO, phishing-resistant MFA, least privilege, and privileged access controls.

• Harden and monitor endpoints and devices (EDR/XDR, MDM).

• Define network security standards and validate them with IT (firewalls, VPN/ZTNA, segmentation).

• Run vulnerability and patch management with risk-based prioritization, and drive fixes to closure.

• Secure email, SaaS, and collaboration platforms, and lead the phishing defense program.

• Operate and improve detection and monitoring (SIEM, DLP, alerting) to reduce noise and catch what matters.

• Lead incident response end to end: detection, containment, investigation, root cause analysis, and lessons learned.

• Plan penetration tests and red team exercises, and own remediation.

Governance, Risk & Compliance

• Build and maintain the information security management system, aligned to ISO 27001.

• Identify, assess, and manage cyber risk across the group, and translate it into clear, business-focused reporting for leadership.

• Keep compliant with the regulations that matter: GDPR, PCI DSS, DORA, and relevant gaming and financial regulations.

• Write practical security policies and standards that people will actually follow.

• Lead audits, certifications, and security questionnaires from partners and regulators.

• Run third-party and vendor risk assessments.

• Build a security-aware culture through engaging training, phishing simulations, and awareness materials.

• Lead and mentor the security team, starting with one penetration tester.

What Makes You a Fit

• 5+ years of progressive experience in cybersecurity with a strong balance between hands-on technical implementation and governance, risk, and compliance (GRC).

• A solid background in security engineering: you’ve designed, built, and operated security controls, not just documented them.

• Strong technical grounding across identity, endpoints, networking, cloud, and security tooling.

• Proven experience with risk assessments, audits, and incident response, ideally including real incidents.

• Experience with at least one recognized framework (ISO 27001, SOC 2, NIST CSF, CIS Controls, or similar).

• Good knowledge of GDPR and at least one of PCI DSS, DORA, or a sector-specific regulatory framework.

• Background in fintech, online gaming, or another regulated industry.

• Ability to explain cyber risk clearly to engineers, executives, and regulators.

• Leadership experience: you’ve managed or mentored at least one team member and want to build a team.

• Comfort working independently in a fast-paced, high-ownership environment.

Nice to have

• Experience securing production systems and AWS environments (IAM, GuardDuty, Security Hub, cloud security posture management).

• Scripting or automation skills (Python, Bash, infrastructure as code).

• Certifications such as CISSP, CISM, OSCP, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty.

What's in it for you?

✨ Be with a team that builds the momentum that moves the industry.
A fast-paced environment driven by innovation, curiosity, and a shared love for technology. A people-first culture that rewards ambition, integrity, and genuine collaboration.

Comprehensive benefits package for Malta-based employees, including:

• Private health insurance, wellness allowance, and communication allowance.

• Healthy lunch on Wednesdays and a varied calendar of social events throughout the year..

• Employee discounts in restaurants and businesses.

• Extended second-parent leave policy.

• Private parking space.

This opportunity is powered by Bet On Talent - Applying through us is your ultimate VIP pass 💎
We work deeply within our partner's ecosystem, which means we skip the generic applicant piles and fast-track your profile straight to the team - Hit apply now and let's make your next big career move happen!