Information Security Officer

At Bauer Media Group, we create content and services that matter to millions of people across Europe. Our Gaming & Competitions business delivers engaging, trusted and innovative experiences for consumers across multiple markets. As Information Security Officer – Gaming & Competitions, you will play a critical role in protecting these services, ensuring that security, compliance and customer trust are embedded into everything we do. Working within our Group Information & Cyber Security function, you will partner closely with business, product and technology teams to enable secure growth while supporting regulatory and certification requirements. This role is the trusted information security partner for Bauer Media's Gaming & Competitions business. You will establish, operate and continuously improve the Information Security Management System (ISMS), ensuring alignment with Bauer Media Group's security framework and international standards such as ISO/IEC 27001.

• Own and lead the Information Security programme for the Gaming & Competitions area.
• Establish, maintain and continuously improve the Gaming & Competitions ISMS in accordance with Group policies, standards and ISO/IEC 27001.
• Lead ISO 27001 certification, surveillance and recertification activities.
• Monitor and interpret applicable legal, regulatory, contractual and certification requirements across multiple European markets.
• Contribute to the ongoing development of Bauer Media Group's Information and Cyber Security Management Framework.
• Assess information security risks, identify control gaps and support the implementation of effective mitigation measures.
• Drive remediation activities for audit findings, vulnerabilities, control weaknesses and security exposures.
• Coordinate assurance activities, including evidence collection, control testing and responses to internal, external and regulatory reviews.
• Provide practical security guidance to product, business and technology teams throughout the development lifecycle.
• Promote secure development practices including threat modelling, secure coding, cloud security, application security testing and software supply chain security.
• Collaborate with Security Architecture, Engineering and Operations teams to reduce vulnerabilities, misconfigurations and overall attack surface.
• Support the management of security incidents affecting Gaming & Competitions services and ensure lessons learned are embedded into future controls and processes.
• Build trusted relationships with senior stakeholders and act as a subject matter expert on information security matters.

• Significant experience in information security, cyber security, technology risk or a related discipline.
• Proven experience implementing, operating and improving Information Security Management Systems.
• Demonstrable experience supporting and maintaining ISO/IEC 27001 certification programmes.
• Strong knowledge of ISO/IEC 27001 and ISO/IEC 27002, including risk management, controls implementation, audit preparation and continuous improvement.
• Experience assessing security risks and driving remediation activities across complex business and technology environments.
• Good understanding of security and compliance requirements within regulated industries; experience within gaming, competitions or similar sectors is advantageous.
• Strong knowledge of application and development security, including secure software development lifecycles, cloud technologies, APIs, CI/CD pipelines and application security testing.
• Ability to communicate complex security concepts clearly to both technical and non-technical audiences.
• Experience working with auditors, regulators, suppliers and senior management stakeholders.
• Strong analytical, problem-solving and stakeholder management skills.
• Relevant degree or equivalent practical experience.
• Professional certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor or equivalent are advantageous.
• Fluent English is essential. German or Polish language skills would be beneficial.