Quick overview
AI summaryInformation security governance, risk and compliance role at iGaming operator LeoVegas Group, sitting within Legal and Compliance. Work covers ISO27001 and PCI-DSS, security risk registers, audits, business continuity plans and staff awareness training. Based in Sliema with a hybrid policy. Suits candidates with at least 3 years in cyber security and ideally CISSP, CISA or CRISC.
Worth knowing: Includes four weeks of "workation" allowing work from abroad, subject to conditions.
About the role
Information Security GRC Analyst, LeoVegas Group
Hybrid · 3+ years' experience
LeoVegas Group is hiring an Information Security GRC Analyst for its Information Security team, which sits within Legal & Compliance. The role covers governance, risk and compliance plus security awareness training, working with IT, Privacy, Tech Compliance, Legal and Platform teams.
What you'd do
You would maintain and test business continuity and disaster recovery plans, take part in security maturity and risk assessments and regulatory audits, and help keep the Group's Security Risk Register. You write and update security policies and standards, run staff security training, and review vendors during onboarding. When incidents such as data breaches happen you support the response and stakeholder communication. You also identify gaps in processes and tooling, recommend fixes, and contribute to security KPIs and strategy.
What you need
A degree in Computing, Cybersecurity or Information Systems, with a Master's preferred, and at least 3 years in a cyber security role. Sound knowledge of ISO 27001 and PCI-DSS, familiarity with security auditing, cloud platforms and incident response are required. CISSP, CISA or CRISC certification is ideal. CVs must be in English.
About the company
LeoVegas Group is an iGaming operator with over 2,000 staff across 19 offices. Benefits include 4 weeks of workation, a wellbeing allowance, private health insurance, retail and leisure discounts and an employee assistance programme.