Security Compliance Specialist

Bally’s Intralot is a newly formed company established through the combination of Intralot and Bally’s International Interactive, positioning the group as a top iGaming operator and a leading global provider of lottery solutions.

Bally’s Intralot is uniquely positioned across digital online gaming markets, lottery, iLottery, and sports betting. Operating at the intersection of technology, regulation, and entertainment. We are optimally positioned to capitalise on strong global growth trends driven by digital adoption and regulatory expansion across lottery and iGaming markets.

Well, what about the team?

We’re looking for a Security Compliance Specialist who thrives on turning complex regulatory and framework requirements into practical, effective security governance. You’ll be part of the Cybersecurity team, working alongside IT, Privacy, Technology, Compliance, Legal and Internal Audit to make sure our security controls are well designed, operating effectively, and demonstrably meet our legal, regulatory and certification obligations across multiple jurisdictions.

This isn’t just about passing audits. It’s about building a governance and risk capability that gives the business confidence to grow, enter new markets and adopt new technology safely.

What makes this role exciting:

· You’ll own key parts of the Group’s security governance framework across a multi-brand, multi-jurisdiction business.

· You’ll work with ISO 27001, PCI DSS, and gambling regulations in a highly regulated industry.

· You’ll shape how the business manages third-party and supply-chain security risk.

· You’ll help the business respond to emerging regulation, including AI governance under the EU AI Act.

· You’ll influence security strategy through risk-based metrics and reporting to senior management.

So, what will you be doing?

Governance, Policy & Standards

· Develop, maintain and periodically review the Group’s Information Security policies, standards and guidelines, aligned to ISO 27001, PCI DSS and NIST.

· Maintain Information Security Management System (ISMS) documentation, including scope, Statement of Applicability and control ownership.

· Monitor changes in regulatory and framework requirements and assess their impact on the control environment.

Risk Management

· Maintain the Group’s Security Risk Register, facilitating risk assessments with risk owners and tracking treatment plans to closure.

· Identify gaps in security processes, controls and the security product portfolio, and drive their resolution with the relevant teams.

Compliance

· Maintain compliance with payment processing standards (PCI DSS) and information security certifications and frameworks.

· Coordinate evidence collection and stakeholder input for external audits, QSA assessments and regulatory audits.

· Track audit and assessment findings through to remediation and verification.

· Support the Legal, Privacy and Compliance teams on regulatory requirements and enquiries.

Third-Party Security Risk

· Perform security due diligence for vendor onboarding, including security questionnaires, evidence review and risk ratings.

· Contribute security requirements to contracts and agreements in collaboration with Legal and Procurement.

· Perform periodic reassessment of critical suppliers and monitor third-party risk throughout the vendor lifecycle.

Incident Management & Resilience

· Maintain the Group’s Security Incident Register, liaising with relevant parties to ensure accurate and timely records.

· Support stakeholder communication after security incidents, including input to regulatory and data protection notifications.

· Contribute to post-incident reviews and make sure lessons learned feed back into controls and policy.

And what will you need?

Domain & Technical Skills

· Strong working knowledge of ISO 27001 and PCI DSS.

· Experience testing IT control design, implementation and operating effectiveness.

· Experience with risk assessment methodologies and maintaining risk registers.

· Knowledge of third-party and supply-chain security risk management.

· Enough technical grounding in cloud, network, application and identity security to challenge evidence credibly with engineering teams.

· Knowledge of gambling regulatory requirements (e.g., UKGC, DGOJ) is a strong asset.

· Awareness of emerging regulation such as the EU AI Act is an advantage.

· 3+ years in Information Security, IT audit, or GRC.

· An undergraduate degree in IT/IS, Computer Science or Information Security is desired but not essential.

Personal Qualities

· Passionate about cyber security governance and data protection.

· Pragmatic and risk-based: understands that compliance supports business objectives rather than replacing them.

· An adaptive, influential style that achieves outcomes without direct authority.

· Excellent written communication, including proven report writing for both technical and executive audiences.

· Detail-oriented and quality-focused, with strong time and expectation management.

· Confident and self-motivated; works well under pressure and on own initiative.

· Takes ownership and follows through on commitments.

What benefits will you get?

• 25 days annual leave, plus the bank holiday allowance.

• Health insurance.

• Volunteering days.

• Home office allowance.

• Wellness or Gym allowance.

• Flexi-block policy allowing you to work abroad for up to four weeks a year.

DNA / Values:

At Bally’s Intralot we are driven by a set of core values that we like to call our DNA. We strive to embody our DNA and keep them at the heart of everything we do!

We Win as One, we succeed together - across every location and every function. We collaborate openly, raise each other up, and share the wins. We're Powered by Curiosity, we ask questions, challenge assumptions and make space to learn and innovate. We have Fun with Purpose, we bring creativity, energy and joy to how we work and what we deliver, because when people enjoy what they do, the work is better for everyone. Our teams Embrace the Possibility, when opportunity appears, we act. When the unexpected hits, we adapt. We don’t wait for change - we move towards it. At Bally's Intralot, we Guard the Game, we protect what matters most, fair play for our players, integrity for our partners, and accountability in everything we do.

Equal Opportunities

At Bally’s Intralot, we are committed to promoting equal opportunities in employment and working conditions. Diversity, Equity and Inclusion are important to us, and we encourage a culture where everyone can be themselves at work. We believe passionately that employing a diverse workforce is central to our success, this is our superpower.
We do not discriminate against employees or job applicants on the basis of race, colour, nationality, ethnic or national origin, age, sex or sexual orientation, gender reassignment, religion or belief, marital or civil partner status, pregnancy or maternity, political opinion or disability.