Description

YSI is a fast-growing social gaming company, headquartered in Gibraltar with colleagues around the world.

Role Purpose

As the Information Security Manager, your main responsibility will be to establish and maintain a comprehensive information security strategy and management program. Your goal will be to ensure the thorough protection of our information assets throughout the entire organization. Additionally, you will need to identify, evaluate, report, and address any potential information security risks, while adhering to legal and regulatory requirements. Your efforts will not only align with the business's objectives but also support its overall success.

In this role, you will act as the process owner of all activities related to the confidentiality, integrity, and availability of customer, business partner, employee, and business information. You will play a key role in ensuring compliance with our YSI Information security policies. This includes managing the overall cyber security strategy and coordinating with the IT Cyber Security Operation to implement measures that improve security maturity.

Your primary focus will be to prevent and minimize the risk of unauthorized or inappropriate use of data and access to data. You will also be responsible for taking necessary actions to mitigate the impact of any security incidents. It is essential to fulfill these responsibilities without unnecessarily hindering the productivity of the business.

As part of the team, you will directly report to the Head of Legal, ensuring effective communication and collaboration.

Responsibilities:

Manage and implement global information security strategy, policies, and procedures
Develop business-wide policies for Information & Cyber Security
Enhance information security management framework based on industry standards
Collaborate with cross-functional team members to ensure solutions meet security standards
Mitigate information risks across the company
Work with third-party advisors to review and mitigate risks
Establish and maintain standards and guidelines for computer-based systems
Educate the business on data protection processes and procedures
Communicate security risks and issues to stakeholders
Maintain knowledge of industry standards
Implement security solutions with vendors
Monitor compliance with security policies and procedures
Influence IT architecture to minimize security risks
Promote information and cyber security training and awareness
Coordinate security efforts and safeguard intellectual property
Ensure security policies and procedures are maintained and updated
Develop incident response protocols and escalation procedures
Assess acquisitions and merger risks within the Risk Management framework
Serve as internal Information and Cyber security consultant
Maintain compliance attestations and audits.

Requirements

You should have startup organizational experience with a proven track record of delivering results.
You should be highly knowledgeable about the business environment and ensure the information systems are kept fully functional and secure.
You should possess extensive experience and expertise in the fields of information security, cyber security, and risk management.
The ideal candidate has a strong technical background.
You have experience working with SIEM tools.
You have experience implementing complex SASE SSE solutions.
You have experience with ISO Standards 27001 and their management.
You have a clear understanding of threat protection techniques and tools.
You take a hands-on approach to making technology decisions that align with the business needs.
You focus on security risk and ensure alignment with the commercial goals of the organization.
You are an influencer who can effectively collaborate with individuals outside of your direct control.

Benefits

Competitive salary
Flexible work
Excellent team-orientated, international work environment
Plus the opportunity to join a fast-growing business where the sky's the limit for your career development

Yellow Social Interactive

New Jobs

Information Security Manager