Skip to content

Open nowPosted 2 days ago

Security Compliance Specialist

BALLY’S INTRALOT SA43 open roles

Pay
€45,000 – €55,000 a year
Where
Msida, Msida, Malta
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Compliance SpecialistBALLY’S INTRALOT SA · Msida, Msida, Malta
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on BALLY’S INTRALOT SA's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. BALLY’S INTRALOT SA postings stay open a median of 27 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 2 days ago

BALLY’S INTRALOT SA median: 27 days open

The posting

Bally’s Intralot is a newly formed company established through the combination of Intralot and Bally’s International Interactive, positioning the group as a top iGaming operator and a leading global provider of lottery solutions.

Bally’s Intralot is uniquely positioned across digital online gaming markets, lottery, iLottery, and sports betting. Operating at the intersection of technology, regulation, and entertainment. We are optimally positioned to capitalise on strong global growth trends driven by digital adoption and regulatory expansion across lottery and iGaming markets.

Well, what about the team?

We’re looking for a Security Compliance Specialist who thrives on turning complex regulatory and framework requirements into practical, effective security governance. You’ll be part of the Cybersecurity team, working alongside IT, Privacy, Technology, Compliance, Legal and Internal Audit to make sure our security controls are well designed, operating effectively, and demonstrably meet our legal, regulatory and certification obligations across multiple jurisdictions.

This isn’t just about passing audits. It’s about building a governance and risk capability that gives the business confidence to grow, enter new markets and adopt new technology safely.

What makes this role exciting:

· You’ll own key parts of the Group’s security governance framework across a multi-brand, multi-jurisdiction business.

· You’ll work with ISO 27001, PCI DSS, and gambling regulations in a highly regulated industry.

· You’ll shape how the business manages third-party and supply-chain security risk.

· You’ll help the business respond to emerging regulation, including AI governance under the EU AI Act.

· You’ll influence security strategy through risk-based metrics and reporting to senior management.

So, what will you be doing?

Governance, Policy & Standards

· Develop, maintain and periodically review the Group’s Information Security policies, standards and guidelines, aligned to ISO 27001, PCI DSS and NIST.

· Maintain Information Security Management System (ISMS) documentation, including scope, Statement of Applicability and control ownership.

· Monitor changes in regulatory and framework requirements and assess their impact on the control environment.

Risk Management

· Maintain the Group’s Security Risk Register, facilitating risk assessments with risk owners and tracking treatment plans to closure.

· Identify gaps in security processes, controls and the security product portfolio, and drive their resolution with the relevant teams.

Compliance

· Maintain compliance with payment processing standards (PCI DSS) and information security certifications and frameworks.

· Coordinate evidence collection and stakeholder input for external audits, QSA assessments and regulatory audits.

· Track audit and assessment findings through to remediation and verification.

· Support the Legal, Privacy and Compliance teams on regulatory requirements and enquiries.

Third-Party Security Risk

· Perform security due diligence for vendor onboarding, including security questionnaires, evidence review and risk ratings.

· Contribute security requirements to contracts and agreements in collaboration with Legal and Procurement.

· Perform periodic reassessment of critical suppliers and monitor third-party risk throughout the vendor lifecycle.

Incident Management & Resilience

· Maintain the Group’s Security Incident Register, liaising with relevant parties to ensure accurate and timely records.

· Support stakeholder communication after security incidents, including input to regulatory and data protection notifications.

· Contribute to post-incident reviews and make sure lessons learned feed back into controls and policy.

And what will you need?

Domain & Technical Skills

· Strong working knowledge of ISO 27001 and PCI DSS.

· Experience testing IT control design, implementation and operating effectiveness.

· Experience with risk assessment methodologies and maintaining risk registers.

· Knowledge of third-party and supply-chain security risk management.

· Enough technical grounding in cloud, network, application and identity security to challenge evidence credibly with engineering teams.

· Knowledge of gambling regulatory requirements (e.g., UKGC, DGOJ) is a strong asset.

· Awareness of emerging regulation such as the EU AI Act is an advantage.

· 3+ years in Information Security, IT audit, or GRC.

· An undergraduate degree in IT/IS, Computer Science or Information Security is desired but not essential.

Personal Qualities

· Passionate about cyber security governance and data protection.

· Pragmatic and risk-based: understands that compliance supports business objectives rather than replacing them.

· An adaptive, influential style that achieves outcomes without direct authority.

· Excellent written communication, including proven report writing for both technical and executive audiences.

· Detail-oriented and quality-focused, with strong time and expectation management.

· Confident and self-motivated; works well under pressure and on own initiative.

· Takes ownership and follows through on commitments.

What benefits will you get?

  • 25 days annual leave, plus the bank holiday allowance.
  • Health insurance.
  • Volunteering days.
  • Home office allowance.
  • Wellness or Gym allowance.
  • Flexi-block policy allowing you to work abroad for up to four weeks a year.

DNA / Values:

At Bally’s Intralot we are driven by a set of core values that we like to call our DNA. We strive to embody our DNA and keep them at the heart of everything we do!

We Win as One, we succeed together - across every location and every function. We collaborate openly, raise each other up, and share the wins. We're Powered by Curiosity, we ask questions, challenge assumptions and make space to learn and innovate. We have Fun with Purpose, we bring creativity, energy and joy to how we work and what we deliver, because when people enjoy what they do, the work is better for everyone. Our teams Embrace the Possibility, when opportunity appears, we act. When the unexpected hits, we adapt. We don’t wait for change - we move towards it. At Bally's Intralot, we Guard the Game, we protect what matters most, fair play for our players, integrity for our partners, and accountability in everything we do.

Equal Opportunities

At Bally’s Intralot, we are committed to promoting equal opportunities in employment and working conditions. Diversity, Equity and Inclusion are important to us, and we encourage a culture where everyone can be themselves at work. We believe passionately that employing a diverse workforce is central to our success, this is our superpower. We do not discriminate against employees or job applicants on the basis of race, colour, nationality, ethnic or national origin, age, sex or sexual orientation, gender reassignment, religion or belief, marital or civil partner status, pregnancy or maternity, political opinion or disability.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against BALLY’S INTRALOT SA's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on BALLY’S INTRALOT SA's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    BALLY’S INTRALOT SA's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.