InfoSec Manager

About the role

We are looking for an experienced InfoSec Manager to lead our security function in Malta. You will own both governance and technical security, ensuring compliance with ISO 27001, GDPR, PCI DSS and other relevant regulations.

Key responsibilities

• Build and maintain a security framework aligned to ISO 27001 and manage security risk across the group.
• Lead audits, certifications, and security questionnaires for partners and regulators.
• Develop and enforce practical security policies and conduct vendor risk assessments.
• Own identity and access management, including SSO, MFA and access controls.
• Harden endpoints, manage EDR and MDM solutions, and oversee vulnerability and patch management.
• Set network security controls with IT (firewalls, VPN, segmentation) and operate SIEM, DLP and email/phishing defenses.
• Coordinate penetration tests, lead incident response investigations and drive remediation.
• Mentor and grow the security team, starting with a penetration tester, and collaborate closely with IT.

Required profile

• 5+ years of experience in information security covering both GRC and hands‑on IT security.
• Background in a regulated industry such as fintech or online entertainment.
• Proven ability to explain security risk to technical and business audiences.
• Leadership experience managing or mentoring at least one team member.
• Experience with recognized frameworks (ISO 27001, SOC 2, NIST) and knowledge of GDPR and PCI DSS.

Required skills

• ISO 27001 implementation and audit experience.
• GDPR and PCI DSS compliance knowledge.
• Identity and access management (SSO, MFA).
• Endpoint security tools (EDR, MDM).
• Network security controls (firewalls, VPN, segmentation).
• Security monitoring tools (SIEM, DLP).
• Vulnerability management and patching processes.
• Penetration testing coordination and incident response.

What we offer

• People‑first culture that rewards ambition, integrity and collaboration.
• Comprehensive benefits for Malta‑based employees: private health insurance, wellness and communication allowances, healthy lunch on Wednesdays, social events, employee discounts, extended second‑parent leave and private parking.