About the job

About the job

Eeze is a Malta-based, technology-driven company that has been developing world-leading online gaming platforms and solutions since 1999.

Underpinned by a history that directly interconnects with the rise of online gambling, the company has been a key pioneer within the international market. Over the years, Eeze has amassed a world-class team of gambling specialists who remain at the frontiers of innovation within this ever-evolving industry.

With a focus on being an international B2B Live Casino provider with our Eeze brand, we have over 400 talented team members based in various locations across Europe, with our headquarters and studio in Malta - Europe’s leading iGaming hub.

Role Purpose

Own the ISMS policy framework and governance programme, providing independent second-line oversight across the technical risk domain.

Drive the organization through ISO 27001:2022 certification and ensure the ISMS scales to meet the information security requirements of regulated markets including Malta, Isle of Man, Curaçao and future target markets.

Key Responsibilities

• Design and maintain the ISMS policy framework, with measurable Control Objectives, KPIs, KRIs, and KCIs linked to specific controls and evidence.

• Govern the ISO register suite as the authoritative evidence layer; produce evidence packages for audits, certifications, and regulatory inspections.

• Compile compliance dashboards from register data and report posture to senior leadership, grounded in documented evidence.

• Govern the non-conformity and CAPA process: classification, root-cause, remediation tracking, and closure review.

• Run risk-based internal audit programmes and own the governance questionnaire suite.

• Drive ISO 27001:2022 Stage 1 and Stage 2 certification, including managing the certification body relationship.

• Assess new market entries against the ISMS and deliver required policy or control amendments before license activation.

• Own the ISMS implementation roadmap, sequencing control deployment across Technology, Product, Operations, Infrastructure, and Procurement.

• Build effective relationships across technical, product, and operations teams so governance is embedded at the point of delivery.

Key Relationships

Internal

• Head of Compliance

• Chief Legal Officer

• Regulatory Compliance

• Technical Compliance - Certifications

• Technology, Product, and Operations stakeholders

External

• ISO 27001:2022 certification body

• Regulatory authorities (MGA, GSC, GCA, others)

• External assessors

• Operator partners

Person Specification

Qualifications

• ISO 27001:2022 Lead Implementer or Lead Auditor.

• CISA, CISM, or equivalent. ISO 31000 (e.g., PECB Lead Risk Manager) desirable.

• Degree in Information Security, Law, Compliance, Risk, or related field, or equivalent professional experience.

Experience

• 5+ years in information security governance or ISMS programme delivery, with 3+ years in a senior or management role.

• Demonstrated ownership of an ISO 27001 programme through to successful Stage 2 certification.

• Experience in a regulated B2B gaming supplier, platform, or aggregator environment.

• Track record of cross-functional delivery across engineering and product, and of leading market entry compliance workstreams.

• Line management experience.

Skills

• Working knowledge of ISO 27001:2022 Annex A and Clauses 4–10.

• Translates regulatory requirements into clear, auditable policy.

• Confident communicator; able to influence without direct authority.

• Comfortable in a fast-moving, multi-jurisdiction environment.

What’s in it for you?

• Experience a dynamic and team-orientated work environment.

• Opportunities for personal growth and learning

• An open, inclusive and supportive team where you will be valued, and your suggestions will be welcome.

• 24 days paid holiday per year. This is in addition to local public holidays.

• Hybrid Working with flexi start time (3 days office/2 days home)

• Private Medical Insurance

• Team Building Opportunities

• Parking (limited)

Our team is committed to keeping remuneration and benefits under constant review to make sure what we offer stays relevant.