FULL TIME
L-IMRIEHEL, MALTA
FULL DAY
19 September 2026
Ref: 453354

We’re building a dedicated security function at MrQ, with its own strategy, roadmap, team and budget, and you’ll be the one building it.

What You Will Do 1. Own the security strategy Define and own the security strategy and maturity roadmap. Set priorities, allocate budget and effort, and be accountable for the targets you set. Report security posture, risk and investment cases to the CTO, exec team and board. Translate technical risk into business impact. Make sure security is part of every major technology and product decision, including how we build with AI, not just what we buy. 2. Build and lead the team Lead the IT Operations function through its Lead: identity and access, employee onboarding and offboarding, the device fleet, SaaS tools, and data requests (DSARs). Hire, develop and lead the security engineering team, starting with a Principal Security Engineer. Design the function for resilience: clear ownership, documented processes, no single points of failure. 3. Run security engineering and operations Own the security tooling end to end (EDR/XDR, SIEM, identity, vulnerability management, email security, DLP), including the deployments already in flight. Own security incident and breach response: deciding severity, directing containment, regulatory notification (ICO, UKGC) and post-incident review. Production incidents belong to Engineering’s on-call team. You own the security path and the call on when an incident is, or might become, a security event. Direct security across a cloud-native AWS estate: platform, payment flows, APIs, player data. 4. Own governance, risk and compliance Own the GRC programme: risk register, policies, control framework, audit readiness (ISO 27001 path, Cyber Essentials, GDPR) and the compliance-automation platform behind it. Partner with Compliance on the regulatory side of a UKGC-licensed operator: player data protection, technical standards, audit evidence. Build documentation to a standard that survives external scrutiny: auditors, regulators and commercial due diligence. 5. Secure how we build with AI MrQ is deeply AI-native: AI agents, internal AI platforms and AI-assisted engineering across the company. Own the security model for all of it: the AI gateway, agent permissions and sandboxing, data boundaries, and governance of third-party AI tools. Own the company’s AI usage policy: which tools are approved, what data they can touch, and what agents are allowed to do on their own. This is greenfield in most companies. Here it’s live production surface. Treat it as a first-class part of the threat model. 6. Build the security culture Own security awareness across the company: training, phishing simulations, onboarding inductions, and security champions inside the squads. Make security something people do, not something done to them. 7. Own the security vendor portfolio Own vendor selection, commercial relationships and spend across the security stack. Run build-vs-buy honestly. Kill tools that don’t earn their keep.

Profiles

If multiple Education and Language Profiles are defined, please note that you must fit at least one of them, but not necessarily all.

PROFILE 1

Language

Reading

Speaking

Understanding

Writing

ENGLISH

Competencies

Determine quality and security procedures of IT and telecom systems and monitor their application
Set standards and establish tools/procedures for reliability, research and IT-output and apply them (quality, security,...)
Inform or train IT teams on technical aspects (procedures, security, risks...) or introduction of new IT/telecom systems
Place access control and security systems
Elaborate exploration, operating and security procedures of IT infrastructure
Analyse performance of IT system and propose measures to improve quality, security and productivity
Check if company IT systems risk management is being applied (security, confidentiality, reliability...)
Analyse architecture of IT systems within company

Past Experience

Occupation

Experience(months)

ICT SECURITY PROFESSIONAL

120

Driving Licences

No Driving Licenses required for this vacancy

Apply

Please be aware that you will be submitting the Application as and that your CV will be part of your application. For additional information, use the message box below.

Message to employer

You must complete the account profile creation to be able to apply for a course.

Salary: €100,000-150,000 per year

Head of Security

Job Description