Job Description
People Management
The role has a need to interact with external regulators on behalf of the company - people skills and conflict resolution soft skills are a must.
Key Relationships
- Compliance
- Payments
- Security Operations
- Technology and Product teams
- Regulators and auditors
Primary Responsibilities:
- Manage IT and Information Security audits across the global customer business:
- Gaming regulations IT and Cybersecurity requirements
- GLI-33b and ISO27001 compliance
- PCI-DSS compliance
- M&A due diligence and post-acquisition Cybersecurity alignment
- Third-party supplier Cybersecurity
- Coordinate multiple concurrent external IT and Cybersecurity audits in support of several stakeholders:
- Regulatory compliance
- Finance
- B2B partners
- Stock exchange listing requirements
- Partner with the business to coordinate and conduct Cybersecurity risk assessments
- Lead the Technology Compliance program workstream to support the entry of customer into new Gaming jurisdictions and B2B partnerships
- Design Cybersecurity controls to adapt to new emerging threats and challenges
- Design and implement improvements to Cybersecurity processes and controls to increase their effectiveness
- Design and implement changes in the Technology platform to align with Cybersecurity compliance requirements
- Lead Cybersecurity discussions with regulators, B2B partners and other external stakeholders as a subject matter expert
- Analyze existing and upcoming IT, Product and Cybersecurity regulatory obligations and translate these into customer policies, processes and controls
- Execute projects to implement the group Technical Compliance strategy
- This role performance will directly impact the costs of bringing our technology and applications aligned with jurisdictional regulatory requirements, participating in key decisions to enter new markets
Knowledge/Expertise/Qualifications:
Essential
- At least three years' experience in a similar role, working in the following areas:
- IT and Cybersecurity Audits
- ISO 27001
- GLI-33b
- PCI DSS
- Risk management