Chief Information Security Officer

We are supporting an established international iGaming and technology group in its search for an experienced Chief Information Security Officer (CISO) to lead its cybersecurity strategy, information security governance and technology risk management.This is an exciting senior leadership opportunity to take ownership of information security across a complex international B2B gaming technology environment.The business develops and owns proprietary iGaming software, providing technology solutions to multiple B2B partners across international markets. As CISO, you will be responsible for safeguarding its software, infrastructure, intellectual property and data while ensuring that security is embedded throughout product development, cloud environments and partner integrations.Working closely with the CEO, Board and senior management, you will have the opportunity to shape the organisation's security strategy, strengthen its cybersecurity maturity and develop scalable security frameworks that support international growth.What You'll Be DoingInformation Security Strategy: Develop and lead the organisation's information security strategy, governance frameworks, policies and risk management programmes, advising the CEO and Board on cybersecurity risks and strategic priorities.ISO 27001 & Compliance: Lead the implementation, maintenance and continuous improvement of the ISO/IEC 27001 Information Security Management System (ISMS), including certification, audits and remediation activities.Cybersecurity & Threat Management: Oversee security monitoring, vulnerability management, penetration testing, access controls, encryption and protection against cyber threats, including ransomware, DDoS attacks and data breaches.Cloud & Application Security: Embed security into software development, cloud infrastructure, APIs and deployment processes, protecting proprietary source code, development pipelines, gaming transactions and B2B integrations.IT Controls & Risk Management: Establish and oversee IT General Controls (ITGC), including access management, change management, segregation of duties, backups and audit trails, while supporting internal and external audits.Data Protection & GDPR: Collaborate with Legal, Compliance and the DPO to ensure effective data protection controls, including DPIAs, data retention, international transfers and privacy governance.Incident Response & Business Continuity: Lead cybersecurity incident response, breach management and the development and testing of business continuity and disaster recovery plans.B2B Partner & Supplier Security: Assess security risks associated with technology partners, suppliers and service providers, ensuring appropriate contractual controls and regulatory compliance.Team Leadership & Security Culture: Lead internal security teams and external providers, promote security awareness and provide regular reporting on cybersecurity risks, incidents and improvements to senior management and the Board.What We're Looking ForSignificant experience in information security and cybersecurity leadership, ideally within B2B iGaming, SaaS, fintech or another regulated technology environment.Proven experience implementing and maintaining ISO/IEC 27001, including certification, audits and ongoing ISMS management.Strong knowledge of information security governance, IT General Controls (ITGC), technology risk management and internal control frameworks.Solid technical understanding of cloud security, application security, APIs, secure software development and identity and access management.Experience overseeing cybersecurity monitoring, vulnerability management, penetration testing and incident response.Strong understanding of business continuity, disaster recovery and operational resilience.Working knowledge of GDPR, data protection requirements and privacy governance.Experience managing security risks across third-party providers, B2B partners and distributed technology teams.Proven ability to communicate technical risks and security priorities effectively to executive management and the Board.Strong leadership, stakeholder management, analytical and problem-solving skills.A relevant degree or equivalent professional experience.Professional fluency in English, both written and spoken.Availability to work primarily from Malta, with flexibility for occasional international travel.Considered an advantage:Experience within B2B iGaming technology, particularly with Malta-licensed gaming suppliers.Familiarity with gaming technical audits and international gaming security requirements.Certifications such as CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer / Lead Auditor or CIPP/E.Experience with SOC 2, PCI DSS and outsourced security operations.What's On OfferAn attractive remuneration package is being offered with this role.