Company Description
Momentum Corporate Services is a leading entertainment group based in Abu Dhabi, United Arab Emirates. Our portfolio includes mobile game development and publishing, virtual reality experiences, iGaming, esports management, and content platform services. We are dedicated to creating immersive and personalized entertainment experiences that push the boundaries of innovation in the industry.
For more information about Momentum Group, please visit our website at www.mgh.ae
Overview
We are seeking an experienced IT Manager to join our dynamic team. The ideal candidate will be responsible for overseeing our IT/Cloud infrastructure, systems engineering, compliance initiatives, security protocols, networking operations and technical support operations. This role requires a blend of technical expertise, leadership skills, and a strong understanding of regulatory compliance within the IT industry.
The key responsibilities
Technical Compliance Programme
- Design, implement and oversee our Technical & Security compliance programme ensuring we adhere to all applicable standards and regulatory requirements in the sector
- Ensure we adopt a consistent approach in the implementation of technical policies and procedures and our colleagues are well informed of the responsibilities they have in operationalizing their key controls.
- Maintains and updates each of our technical security and data privacy related policies/standards in line with regulatory requirements and broader Enterprise Risk Framework approach
Data privacy initiatives
- Develop & maintain our data privacy framework to ensure compliance with applicable data protection laws and regulations.
- Work with business and technical teams to implement appropriate data protection technical measures such data encryption, data loss prevention and secure data handling practices.
- Monitor and respond to any data privacy related issues identified in conjunction with our Technical SOC and Incident Management team.
- Develops and regularly reviews the data breach response plan to ensure quick and decisive action in the event of a data breach related incident. Works with the relevant teams and external stakeholders to ensure a timely, and satisfactory resolution.
Monitoring & Risk assessment
- Stays abreast of emerging technical compliance and data privacy related industry trends and ensures the business remains ahead and is prepared for these
- Conducts periodic risk assessments to identify potential compliance or data privacy issues, identifying strategies to address and mitigate the risks
Regulatory Audits & Reporting
- Coordinates technical compliance or data privacy related external assessments ensuring all documentation, evidence and supporting compliance records are available for review.
- Provides periodic updates to internal stakeholders on adherence to compliance requirements and any potential gaps identified related to the programme.
Business Collaboration & Support
- Works closely with business an operational teams to ensure technical compliance and data privacy principles are integrated into all business processes, systems and projects.
- Serves as a key advisor to internal stakeholders on technical compliance and data privacy issues, providing guidance on the implementation of compliant solutions and controls
Vendor Security & Privacy Compliance
- Evaluates 3rd party partners to assess their security posture and approach to data privacy, ensuring they remain aligned with organization policies and regulatory requirements
- Provides regular reporting on the status of the 3rd party security assurance programme highlighting identified risks and remediation steps required
Continuous Improvement
- Establish a framework for continuous improvement of our technical compliance and data privacy programme ensuring we remain agile and adapt to regulatory changes and emerging compliance trends.
- Identifies opportunities to streamline compliance processes and reduce cost/complexity in the approach taken
Skills Required
- In depth understanding of technical & security regulatory landscape for gaming, including technical standards, industry security frameworks and relevant data protection laws e.g. ISO/IEC 27001 (security), ISO/IEC 27701 (privacy), ISO/IEC 31000 (risk) NIST CSF, PCI DSS, SOC 2, CIS
- Proven experience in development, implementation of technical compliance programmes including policy development, routine internal controls audits, and ensuring we adhere to industry standards
- Familiarity with technical controls and processes required for compliance e.g. encryption, data security, access mgmt., systems auditing with knowledge of infrastructure controls that protect sensitive information.
- Strong communication skills with internal/external stakeholders and can interpret technical compliance requirements into consumable business deliverables
Experience
- 5-7 years’ experience in a technical compliance / data privacy focused role ensuring adherence to regulatory requirements
- Hands-on experience with industry specific technical compliance frameworks (listed below), including implementing compliance programs, conducting audits and regulatory reporting
- Proven experience in managing data privacy frameworks including developing and implementing data protection policies
- Proven track record in successfully rolling out policies and procedures across multiple teams and business units
- Technical background in information security and protective measures required to protect sensitive data
- Proven ability to engage and influence stakeholders at all levels, ensuring compliance and data privacy principles are well understood and supported
Qualifications
- Bachelors degree in Information Technology, Computer Science, Cyber Security, Law, Business administration or related field
- Certified Information Systems Security Professional (CISSP)
- Certified Information Privacy Professional (CIPP)
- Certified Information Security Manager (CISM)
- Certified Data Protection Officer (CDPO)
- Certified in Risk & Information Systems and Control (CRISC)
One or many of these qualifications are preferred.
Offer
- Fantastic new office on Yas Island.
- Opportunity to work for a growing start-up business.
- Chance to work with like-minded professionals.
- A diverse environment with determination to reach our goals.
- Training and learning opportunities.
- Company benefits which support your health and well-being.
Interested? Do apply directly with your CV
#momentumservices #igaming #hiring #UAE #UAEjobs
