Cloud Specialist - Security SSR (AR, Perú, Chile)

We are on a mission to pioneer the world’s next era of play. As we grow across Europe and Latin America, we’re building The Playstack - the technology powering the next generation of sports, gaming, and fan experiences. Join us, and help make it the most widely used platform in the world! From operations, to marketing, to product, we are looking for talented people who will shape how millions of customers play, watch, and connect every day.

About the Role-

Super is creating a new Information Security Officer position within the Cybersecurity team to own our company-wide security governance, policy and compliance agenda. This is a governance and compliance role, not a technical one: it owns our security policies, drives security awareness and training, and ensures every team across the organisation knows what they must do to be compliant and follows through until it's done.

What the role involves

Policies & governance

Own and maintain the company-wide information security policy framework, ensuring it stays current, coherent and aligned with the business, and act as the internal authority on relevant standards and regulations (e.g. ISO 27001, GDPR)
Update and drive the security compliance strategy, including operation of the GRC platform, ensuring policies are clear and effectively communicated across the organisation

Training & awareness

Design and deliver security awareness and training programmes, tailored to different teams and tribes, so people understand their compliance obligations and how to meet them

Driving & verifying compliance

Drive compliance adoption across all business units, validating that teams understand and complete the steps required, and establish escalations so gaps are surfaced and closed proactively
Track and report on policy exceptions and remediation progress

Data protection & PII

Own the PII compliance plan, including the programme to deprecate unencrypted PII, and produce reporting escalated to the Board and Risk Committee where necessary

Audit & reporting

Coordinate with external auditors and manage evidence collection for audits and certifications
Provide regular compliance reporting to leadership, the Board and the Risk Committee

What we are looking for

Proven experience in information security governance, risk and compliance (GRC), ideally within a regulated, multi-market environment
Deep, practical knowledge of ISO 27001, GDPR and related security and data-protection standards
Experience owning security policy frameworks and running security awareness and training programmes
Hands-on experience operating a GRC platform and driving compliance across many teams
Track record of coordinating internal and external audits and managing audit evidence
Excellent stakeholder-management and communication skills, with the ability to influence and drive compliance without direct authority
Experience reporting to senior leadership, boards or risk committees

Nice to have

Relevant certifications (e.g. CISM, CISA, ISO 27001 Lead Implementer/Auditor, CISSP)
Experience with data-protection and PII programmes
Exposure to fast-scaling technology, gaming or fintech organisations

What we offer

Medical / Health Insurance
Open Annual Leave
Employee Assistance Programme
Training & Learning Development

About Super

We are a global technology group, dedicated to building the future of entertainment and fan-centric experiences. With commercial markets in Brazil, Belgium, Poland, Romania, Greece and Serbia, and a network of offices across Spain, Croatia, Malta, Gibraltar, the Netherlands and the UK, we are a truly international organization. Our purpose at Super has evolved from sports and betting into creating the platform that stretches into the wider world of technology-driven entertainment. With a growing and diverse team of more than 5,000 people, we create immersive, responsible, and personalised experiences for millions of customers worldwide.

Shaping the Future of Play

Everything we do at Super is rooted in doing what is right: for customers, for each other, and for our long-term vision. Our Culture Manifesto is our North Star. It captures our purpose, mission, and the six core beliefs that shape how we think, make decisions, and act every day. Want to explore our culture in more detail? Visit our careers page:

Super is committed to the highest standards of compliance, safety, and responsibility. As such, we are active members of the International Betting Integrity Association (IBIA) and the European Gaming & Betting Association (EGBA).

At Super, we operate as a high-performing team. We hire and grow talent based on ability and potential, regardless of background and identity because we know diverse perspectives, drive better performance.

Originally posted on Himalayas

Job Description

About the Role-

What the role involves

Policies & governance

Own and maintain the company-wide information security policy framework, ensuring it stays current, coherent and aligned with the business, and act as the internal authority on relevant standards and regulations (e.g. ISO 27001, GDPR)
Update and drive the security compliance strategy, including operation of the GRC platform, ensuring policies are clear and effectively communicated across the organisation

Training & awareness

Design and deliver security awareness and training programmes, tailored to different teams and tribes, so people understand their compliance obligations and how to meet them

Driving & verifying compliance

Drive compliance adoption across all business units, validating that teams understand and complete the steps required, and establish escalations so gaps are surfaced and closed proactively
Track and report on policy exceptions and remediation progress

Data protection & PII

Own the PII compliance plan, including the programme to deprecate unencrypted PII, and produce reporting escalated to the Board and Risk Committee where necessary

Audit & reporting

Coordinate with external auditors and manage evidence collection for audits and certifications
Provide regular compliance reporting to leadership, the Board and the Risk Committee

What we are looking for

Proven experience in information security governance, risk and compliance (GRC), ideally within a regulated, multi-market environment
Deep, practical knowledge of ISO 27001, GDPR and related security and data-protection standards
Experience owning security policy frameworks and running security awareness and training programmes
Hands-on experience operating a GRC platform and driving compliance across many teams
Track record of coordinating internal and external audits and managing audit evidence
Excellent stakeholder-management and communication skills, with the ability to influence and drive compliance without direct authority
Experience reporting to senior leadership, boards or risk committees

Nice to have

Relevant certifications (e.g. CISM, CISA, ISO 27001 Lead Implementer/Auditor, CISSP)
Experience with data-protection and PII programmes
Exposure to fast-scaling technology, gaming or fintech organisations

What we offer

Medical / Health Insurance
Open Annual Leave
Employee Assistance Programme
Training & Learning Development

About Super

Shaping the Future of Play

Originally posted on Himalayas

Job Description

About the Role-

What the role involves

Policies & governance

Own and maintain the company-wide information security policy framework, ensuring it stays current, coherent and aligned with the business, and act as the internal authority on relevant standards and regulations (e.g. ISO 27001, GDPR)
Update and drive the security compliance strategy, including operation of the GRC platform, ensuring policies are clear and effectively communicated across the organisation

Training & awareness

Design and deliver security awareness and training programmes, tailored to different teams and tribes, so people understand their compliance obligations and how to meet them

Driving & verifying compliance

Drive compliance adoption across all business units, validating that teams understand and complete the steps required, and establish escalations so gaps are surfaced and closed proactively
Track and report on policy exceptions and remediation progress

Data protection & PII

Own the PII compliance plan, including the programme to deprecate unencrypted PII, and produce reporting escalated to the Board and Risk Committee where necessary

Audit & reporting

Coordinate with external auditors and manage evidence collection for audits and certifications
Provide regular compliance reporting to leadership, the Board and the Risk Committee

What we are looking for

Proven experience in information security governance, risk and compliance (GRC), ideally within a regulated, multi-market environment
Deep, practical knowledge of ISO 27001, GDPR and related security and data-protection standards
Experience owning security policy frameworks and running security awareness and training programmes
Hands-on experience operating a GRC platform and driving compliance across many teams
Track record of coordinating internal and external audits and managing audit evidence
Excellent stakeholder-management and communication skills, with the ability to influence and drive compliance without direct authority
Experience reporting to senior leadership, boards or risk committees

Nice to have

Relevant certifications (e.g. CISM, CISA, ISO 27001 Lead Implementer/Auditor, CISSP)
Experience with data-protection and PII programmes
Exposure to fast-scaling technology, gaming or fintech organisations

What we offer

Medical / Health Insurance
Open Annual Leave
Employee Assistance Programme
Training & Learning Development

About Super

Shaping the Future of Play

Originally posted on Himalayas

Job Description

About the Role-

What the role involves

Policies & governance

Own and maintain the company-wide information security policy framework, ensuring it stays current, coherent and aligned with the business, and act as the internal authority on relevant standards and regulations (e.g. ISO 27001, GDPR)
Update and drive the security compliance strategy, including operation of the GRC platform, ensuring policies are clear and effectively communicated across the organisation

Training & awareness

Design and deliver security awareness and training programmes, tailored to different teams and tribes, so people understand their compliance obligations and how to meet them

Driving & verifying compliance

Drive compliance adoption across all business units, validating that teams understand and complete the steps required, and establish escalations so gaps are surfaced and closed proactively
Track and report on policy exceptions and remediation progress

Data protection & PII

Own the PII compliance plan, including the programme to deprecate unencrypted PII, and produce reporting escalated to the Board and Risk Committee where necessary

Audit & reporting

Coordinate with external auditors and manage evidence collection for audits and certifications
Provide regular compliance reporting to leadership, the Board and the Risk Committee

What we are looking for

Proven experience in information security governance, risk and compliance (GRC), ideally within a regulated, multi-market environment
Deep, practical knowledge of ISO 27001, GDPR and related security and data-protection standards
Experience owning security policy frameworks and running security awareness and training programmes
Hands-on experience operating a GRC platform and driving compliance across many teams
Track record of coordinating internal and external audits and managing audit evidence
Excellent stakeholder-management and communication skills, with the ability to influence and drive compliance without direct authority
Experience reporting to senior leadership, boards or risk committees

Nice to have

Relevant certifications (e.g. CISM, CISA, ISO 27001 Lead Implementer/Auditor, CISSP)
Experience with data-protection and PII programmes
Exposure to fast-scaling technology, gaming or fintech organisations