Information Security Manager

pThe Information Security Manager is responsible for managing the company’s Information Security programme and coordinating security efforts across the organisation. The role leads the development, implementation, and maintenance of an Information Security Management System (ISMS) aligned with ISO 27001, relevant gambling regulations, and other applicable frameworks. /pbrZorg ervoor dat u snel solliciteert om uw kansen op een sollicitatiegesprek te maximaliseren. Lees de volledige functieomschrijving hieronder.brpWorking closely with multiple teams across the organisation, the Information Security Manager will prioritise, plan, design, and oversee the implementation of appropriate security controls to strengthen the confidentiality, integrity, and availability of the company’s information assets. /pulliTake ownership of and lead the company’s Information Security function to support and achieve business objectives. /liliContribute to the development of short-term and long-term global security strategies in support of the Group’s overall business goals. /liliLead the risk management programme across the entire risk lifecycle, from risk assessments through to risk treatment and mitigation. /liliCoordinate the vulnerability management programme from end to end. /liliEnsure the Information Security Management System (ISMS) operates effectively and meets its defined objectives. /liliMaintain Information Security regulatory compliance with applicable gaming and government regulations, contractual obligations, and relevant security standards and frameworks. /liliDrive and continuously improve the company’s Information Security awareness and training programme. /liliLiaise with the global Security Operations Centre (SOC) and coordinate security incident response and escalations as required. /liliCoordinate internal and external audits, assessments, security reviews, and related remediation activities. /liliCollaborate closely with IT teams to design, implement, and ensure the effectiveness of technical security controls. /liliMonitor and report agreed Information Security KPIs periodically to global security leadership and management. /liliSupport security-related activities outside normal working hours when required by the systems and services being supported. /liliCarry out assignments provided by Global Information Security leadership, IT leadership, and Management. /li /ulQualifications RequirementsulliMinimum 5 years of experience across Information Security and IT domains. /liliStrong ability to collaborate effectively with teams across multiple functions and disciplines. /liliComfortable working within a matrix reporting environment. /liliExperience implementing Information Security and compliance frameworks such as ISO 27001/27002, GDPR, NIST, SOC 2, PCI DSS, and gambling regulations across multiple markets. /liliHands-on experience conducting risk assessments and developing appropriate risk treatment plans. /liliProject and process management experience, preferably within Agile environments. /liliExperience developing and maintaining Information Security documentation, including policies, procedures, standards, and guidelines. /liliProfessional Information Security certification such as CISSP, CRISC, C|CISO, CISM, or another relevant certification. /liliISO 27001 Lead Auditor or Lead Implementer certification is considered an advantage. /liliBachelor’s degree in IT, Business, or a related field. A Master’s degree is considered an advantage. /liliExcellent written and spoken English. /liliAbility to communicate technical and security-related information clearly and concisely to non-technical stakeholders. /liliStrong commitment to continuous personal and professional development. /liliStrong organisational and results-oriented mindset. /liliStrategic and analytical thinking. /liliExcellent interpersonal and stakeholder management skills. /liliAbility to take initiative and work effectively under pressure. /liliStrong problem-solving and decision‑making abilities. /liliAbility to manage multiple priorities and responsibilities simultaneously. /liliClear and effective communication with both technical and non-technical stakeholders. /li /ulTravel RequirementspTravel may be required from time to time according to business needs. xgiwjmb The role may also require work outside normal working hours in response to security incidents or the operational needs of supported systems. /pbr