Information Security Officer

About the Role

Super is launching a new position for an Information Security Officer within its Cybersecurity team. This role focuses on managing security governance, policies, and compliance across the company. It emphasizes governance and compliance supervision rather than technical tasks, leading the creation and upkeep of security policies, promoting security awareness and training, and ensuring organizational adherence to compliance requirements.

Key Responsibilities

• Oversee and update the company's information security policies and framework to keep them relevant, coherent, and in alignment with business needs. Serve as the internal expert on standards like ISO 27001 and regulations such as GDPR.
• Develop and manage the security compliance strategy, including operating the Governance, Risk, and Compliance (GRC) platform, and ensure clear communication of policies across all teams.
• Design and implement targeted security awareness and training programs for various departments to foster understanding and compliance with security obligations.
• Promote compliance adoption throughout business units, verify teams complete necessary compliance steps, and establish escalation measures to address and resolve gaps proactively.
• Manage tracking and reporting on any policy exceptions and progress on their remediation.
• Lead the Personally Identifiable Information (PII) compliance initiatives, including plans to eliminate unencrypted PII, and prepare reports for the Board and Risk Committee as needed.
• Coordinate with external auditors for audits and certifications, managing all required evidence collection.
• Provide continuous compliance reports to company leadership, the Board, and the Risk Committee.

Candidate Requirements

• Proven track record in information security governance, risk management, and compliance within regulated and multi-market contexts.
• In-depth knowledge of ISO 27001, GDPR, and associated security and data protection standards.
• Experience managing security policy frameworks and leading security awareness and training initiatives.
• Practical experience operating a GRC platform and promoting compliance across various teams.
• Successful experience coordinating internal and external audits, including evidence management.
• Strong stakeholder management and communication skills, capable of influencing compliance adherence without direct authority.
• Experience providing reports to senior leadership, boards, or risk committees.

Preferred Qualifications

• Certifications such as CISM, CISA, ISO 27001 Lead Implementer/Auditor, or CISSP.
• Familiarity with data protection and PII compliance programs.
• Background in fast-growing technology, gaming, or fintech companies.

Compensation and Benefits

• Medical and health insurance coverage.
• Flexible, open annual leave policy.
• Access to employee assistance programs.
• Opportunities for training and professional development.

About Super

Super is an international technology company focused on pioneering the future of entertainment and fan-centric experiences with markets spanning Brazil, Belgium, Poland, Romania, Greece, and Serbia, and offices in multiple European countries. With over 5,000 employees, the company evolves from sports and betting into wider tech-driven entertainment, dedicated to creating immersive, responsible, and personalized experiences for millions worldwide.

Super prioritizes ethical standards, compliance, safety, and responsibility, maintaining active memberships in the International Betting Integrity Association and the European Gaming & Betting Association. The company promotes a culture of high performance, diversity, and inclusive hiring based on ability and potential.