Senior Security Governance Specialist

Malta · 4+ years experience · Posted Oct 12, 2026

At a glance

This role is a key component of the security governance and assurance function within the InfoSec team at Betsson Group.
It ensures security controls are defined and implemented by key partners while maintaining a standard security control framework.
This advisory role carries the responsibility for all aspects of security governance, risk, and compliance with a focus on regulatory matters.

Develop methods to monitor and measure security assurance and governance efforts.
Maintain and uphold system ISO27001 and PCI-DSS assurance accreditation materials.
Conduct technical security assessments of application, system or network, documenting the security posture and conformance to Betsson’s security control framework.
Partake in security configuration reviews to ensure applications, networks and systems are compliant with policies and standards.
Ensure policies, procedures, and standards are current whilst also developed, reviewed and updated periodically.
Interface with external auditors in preparation for novel gaming license applications, and during ISMS audits by providing supporting evidence and coordinating meetings as necessary.
Interface with various teams to manage information security related audits, findings and remediation actions.
Maintain, follow-up and communicate the Security Risk Register together with internal stakeholders.
Manage and maintain the Corrective Action Plan.
Coordinate and participate in Business Continuity Table-top exercises.

3/4+ years’ progressive experience in Security, Governance, Risk, Compliance or related professional area
3/4+ years’ experience working with enterprise security risk management frameworks and processes (e.g., ISO2700X, NIST, Cloud Security Alliance)
3/4+ years’ experience in facilitating and conducting security assessments related to PCI-DSS, ISO27001, NIST 800-53 and Cybersecurity Framework audits
Strong verbal and written communication skills with the ability to articulate and interpret legal obligations and security requirements
Knowledge of business environments and service requirements, particularly in sectors like gaming or hospitality.
Experience working with cross functional, sourced, or matrixed teams
Proven ability to effectively prioritize and execute tasks in a high-pace environment
Familiarity with GRC systems and processes, strong organizational skills, and problem resolution abilities.
Experience in business systems and process planning
Project management skillset and a can-do attitude