Company Description
We’re the world’s leading sports technology company, at the intersection between sports, media, and betting. More than 1,700 sports federations, media outlets, betting operators, and consumer platforms across 120 countries rely on our know-how and technology to boost their business.
Job Description
At Sportradar's Information Security Team, which boasts over 55 security experts in 6 global locations, we are excited to announce an opening for a Security Advisory Specialist. Reporting directly to the Head of Security Advisory, the successful candidate will be a pivotal member of our Security Advisory function, contributing significantly to our cybersecurity initiatives and global projects.
Key Responsibilities:
- Coordinate End-to-End Security Audits: Lead the planning, execution, reporting, and follow-up of internal and external Information Security audits (e.g., ISO 27001, SOC 1, SOC 2, and other regulatory/compliance audits), ensuring smooth collaboration between auditors, business units, and stakeholders.
- Policy and Measures Management: Review and oversee security policy exceptions, and ensure the effective implementation of technical and organizational measures to safeguard information security and regulatory compliance.
- Compliance & Standards Implementation: Drive alignment with frameworks such as ISO 27001, SOC 2, and the NIST Cybersecurity Framework, supporting continuous compliance across the organization.
- Audit Readiness & Evidence Management: Prepare teams and documentation for upcoming audits, coordinate evidence collection, and manage audit responses.
- Audit Findings & Remediation Tracking: Document audit findings, assign and track remediation actions, and follow up with stakeholders until closure, providing regular updates to leadership.
- Risk & Gap Management: Conduct cybersecurity risk assessments and gap analyses, and oversee remediation activities to address identified risks.
- Business Operations Enablement: Provide day-to-day support to seamlessly embed security practices into business processes.
- Collaboration & Teamwork: Partner with colleagues, external auditors, and leadership to achieve audit and security objectives.
- Continuous Improvement: Stay informed on evolving threats, regulations, and industry best practices to enhance audit and compliance processes.
- Project Delivery Support: Act as the Information Security Subject Matter Expert (SME) in projects, ensuring security requirements are integrated into engineering and business initiatives.
- Project Management Contribution: Support and coordinate various security-related projects, with a strong focus on compliance preparedness.
Mandatory Requirements:
- Minimum 2 years of professional experience in information security.
- Proven experience coordinating or supporting security audits (internal/external), gap analyses, and security assessments, ideally including ISO 27001 and SOC 2.
- Strong understanding of cybersecurity risk management and audit frameworks.
- Awareness of current threats and trends in information security.
- Demonstrated ability in client support and project coordination.
Desirable Skills:
- Prior experience in executing security audits (internal/external), gap analyses, and security assessments as an independent auditor.
- Oversee and facilitate regulatory audits e.g. UK Gambling Commission (UKGC) or WLA Security Control Standard (WLA-SCS).
- Experience developing or implementing security policies.
- Experience with AuditBoard and/or other leading GRC Platforms.