About this role
InfoSec Manager
Malta or EU remote | Reports to CTO, leads one pentester to start. Build the framework, then run the controls: ISO 27001, GDPR, PCI DSS, SIEM, EDR, incident response.
Apply
We usually respond within a week
Location: Based in Malta - Employee or Remote from Europe Reporting to CTO Direct Reports: Penetration Tester
Your Impact
Security Engineering & Architecture
Design and implement security controls across infrastructure, endpoints, identity, and cloud environments using secure-by-design and Zero Trust principles.
Build security into the way the team ships software, partnering with engineering on threat modeling, secure code practices, and security guardrails in CI/CD pipelines.
Evaluate, deploy, and tune security tooling, automating detection, response, and compliance checks wherever possible.
Keep pace with the threat landscape, including ransomware, supply chain attacks, social engineering, and AI-enabled threats, and adapt the defenses to match.
Security Operations & Defense
Own identity and access management: SSO, phishing-resistant MFA, least privilege, and privileged access controls.
Harden and monitor endpoints and devices (EDR/XDR, MDM).
Define network security standards and validate them with IT (firewalls, VPN/ZTNA, segmentation).
Run vulnerability and patch management with risk-based prioritization, and drive fixes to closure.
Secure email, SaaS, and collaboration platforms, and lead the phishing defense program.
Operate and improve detection and monitoring (SIEM, DLP, alerting) to reduce noise and catch what matters.
Lead incident response end to end: detection, containment, investigation, root cause analysis, and lessons learned.
Plan penetration tests and red team exercises, and own remediation.
Governance, Risk & Compliance
Build and maintain the information security management system, aligned to ISO 27001.
Identify, assess, and manage cyber risk across the group, and translate it into clear, business-focused reporting for leadership.
Keep compliant with the regulations that matter: GDPR, PCI DSS, DORA, and relevant gaming and financial regulations.
Write practical security policies and standards that people will actually follow.
Lead audits, certifications, and security questionnaires from partners and regulators.
Run third-party and vendor risk assessments.
Build a security-aware culture through engaging training, phishing simulations, and awareness materials.
Leadership & Process
Lead and mentor the security team, starting with one penetration tester.
What Makes You a Fit
5+ years of progressive experience in cybersecurity with a strong balance between hands-on technical implementation and governance, risk, and compliance (GRC).
A solid background in security engineering: you’ve designed, built, and operated security controls, not just documented them.
Strong technical grounding across identity, endpoints, networking, cloud, and security tooling.
Proven experience with risk assessments, audits, and incident response, ideally including real incidents.
Experience with at least one recognized framework (ISO 27001, SOC 2, NIST CSF, CIS Controls, or similar).
Good knowledge of GDPR and at least one of PCI DSS, DORA, or a sector-specific regulatory framework.
Background in fintech, online gaming, or another regulated industry.
Ability to explain cyber risk clearly to engineers, executives, and regulators.
Leadership experience: you’ve managed or mentored at least one team member and want to build a team.
Comfort working independently in a fast-paced, high-ownership environment.
Nice to have
Experience securing production systems and AWS environments (IAM, GuardDuty, Security Hub, cloud security posture management).
Scripting or automation skills (Python, Bash, infrastructure as code).
Certifications such as CISSP, CISM, OSCP, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty.
What's in it for you?
✨ Be with a team that builds the momentum that moves the industry. A fast-paced environment driven by innovation, curiosity, and a shared love for technology. A people-first culture that rewards ambition, integrity, and genuine collaboration.
Comprehensive benefits package for Malta-based employees, including:
Private health insurance, wellness allowance, and communication allowance.
Healthy lunch on Wednesdays and a varied calendar of social events throughout the year..
Employee discounts in restaurants and businesses.
Extended second-parent leave policy.
Private parking space.
This opportunity is powered by Bet On Talent - Applying through us is your ultimate VIP pass 💎 We work deeply within our partner's ecosystem, which means we skip the generic applicant piles and fast-track your profile straight to the team - Hit apply now and let's make your next big career move happen!
Department
IT & Security
Locations
Malta, Remote
Remote status
Hybrid
Employment type
Full-time
Contact
Federica Ceci
Talent Acquisition Specialist
Apply
IT & Security
· Malta, Remote
· Hybrid
InfoSec Manager
Malta or EU remote | Reports to CTO, leads one pentester to start. Build the framework, then run the controls: ISO 27001, GDPR, PCI DSS, SIEM, EDR, incident response.
Loading application form
Close modal
Applicant tracking system
by Teamtailor