Security Compliance Specialist

Bally’s Intralot is a newly formed company established through the combination of Intralot and Bally’s International Interactive, positioning the group as a top iGaming operator and a leading global provider of lottery solutions. Bally’s Intralot is uniquely positioned across digital online gaming markets, lottery, iLottery, and sports betting. Operating at the intersection of technology, regulation, and entertainment. We are optimally positioned to capitalise on strong global growth trends driven by digital adoption and regulatory expansion across lottery and iGaming markets. Well, what about the team? We’re looking for a Security Compliance Specialist who thrives on turning complex regulatory and framework requirements into practical, effective security governance. You’ll be part of the Cybersecurity team, working alongside IT, Privacy, Technology, Compliance, Legal and Internal Audit to make sure our security controls are well designed, operating effectively, and demonstrably meet our legal, regulatory and certification obligations across multiple jurisdictions. This isn’t just about passing audits. It’s about building a governance and risk capability that gives the business confidence to grow, enter new markets and adopt new technology safely. What makes this role exciting: · You’ll own key parts of the Group’s security governance framework across a multi-brand, multi-jurisdiction business. · You’ll work with ISO 27001, PCI DSS, and gambling regulations in a highly regulated industry. · You’ll shape how the business manages third-party and supply-chain security risk. · You’ll help the business respond to emerging regulation, including AI governance under the EU AI Act. · You’ll influence security strategy through risk-based metrics and reporting to senior management. So, what will you be doing? Governance, Policy & Standards · Develop, maintain and periodically review the Group’s Information Security policies, standards and guidelines, aligned to ISO 27001, PCI DSS and NIST. · Maintain Information Security Management System (ISMS) documentation, including scope, Statement of Applicability and control ownership. · Monitor changes in regulatory and framework requirements and assess their impact on the control environment. Risk Management · Maintain the Group’s Security Risk Register, facilitating risk assessments with risk owners and tracking treatment plans to closure. · Identify gaps in security processes, controls and the security product portfolio, and drive their resolution with the relevant teams. Compliance · Maintain compliance with payment processing standards (PCI DSS) and information security certifications and frameworks. · Coordinate evidence collection and stakeholder input for external audits, QSA assessments and regulatory audits. · Track audit and assessment findings through to remediation and verification. · Support the Legal, Privacy and Compliance teams on regulatory requirements and enquiries. Third-Party Security Risk · Perform security due diligence for vendor onboarding, including security questionnaires, evidence review and risk ratings. · Contribute security requirements to contracts and agreements in collaboration with Legal and Procurement. · Perform periodic reassessment of critical suppliers and monitor third-party risk throughout the vendor lifecycle. Incident Management & Resilience · Maintain the Group’s Security Incident Register, liaising with relevant parties to ensure accurate and timely records. · Support stakeholder communication after security incidents, including input to regulatory and data protection notifications. · Contribute to post-incident reviews and make sure lessons learned feed back into controls and policy.