Technical Compliance Officer

Job Summary

The business supplies a live casino platform and content into multiple regulated markets, each with its own technical standards, certification scheme and evidentiary expectations. The Technical Compliance Officer - Certifications translates those obligations into testable technical requirements, owns the certification lifecycle end to end - readiness, submission, findings closure, surveillance and recertification - and is the primary interface with accredited test laboratories, certification bodies and regulatory authorities.

As a second-line role it does not operate first-line controls. It defines the compliance position in technical terms, tests whether the evidence supports that position, and reports certification risk with proposed treatment.

Purpose

Certification and technical standards obligations across the licence portfolio, currently Malta (MGA), Isle of Man (GSC) and Curacao (CGA), and all certification engagements with accredited test laboratories. Scope extends to new markets as the licence footprint grows.

Main Responsibilities

Regulatory Research and Technical Translation

• Maintain a current view of the technical standards, certification schemes and regulatory instruments applying to a B2B platform and content supplier in each market in scope

• Translate regulatory text into testable technical requirements and control objectives that first-line teams can act on without further interpretation

• Run gap analyses against current posture and issue risk-ranked remediation plans naming the deliverables required to close

Requirement-to-Control Traceability

• Maintain traceability from each regulatory requirement to the control that satisfies it and the artefact that evidences it, across all jurisdictions in scope

• Keep the mapping current as requirements, controls and platform architecture change, so that certification questions are answered from the register rather than reconstructed under time pressure

• Validate mapping completeness ahead of each certification milestone and resolve unmapped or unevidenced requirements with the first line before submission

Certification and Audit Management

• Maintain a forward certification calendar by standard, jurisdiction and certified asset, sequenced against commercial expansion plans and licence renewal dates

• Run pre-audit readiness assessments and assemble submission packs - technical documentation, control evidence and test results - to the standard each body expects

• Act as primary point of contact for certification bodies and regulatory authorities, managing scope, queries, timelines, proposals and invoicing

• Track findings and non-conformities through to verified closure, and manage surveillance, change notification and recertification obligations

Regulatory Change Management

• Assess the technical impact of regulatory and scheme changes on the control environment, the certified asset base and existing certifications

• Issue impact assessments stating what has changed, which controls and assets are affected, what must be done and by when

• Maintain traceability from notification through to implementation and evidence, so that the position taken on any change can be reconstructed and defended

Risk Reporting and Cross-Functional Support

• Own certification and technical compliance entries in the compliance risk register as an independent second-line assessment of exposure, treatment and status

• Report certification risk and readiness to the compliance forum with proposed treatment, escalating where evidence gaps or timelines put a licence or a market at risk

• Brief first-line teams on the jurisdiction-specific requirements bearing on their work, and support new market entry with technical feasibility assessments and realistic certification timelines

Key Relationships

• First line: Product, Engineering, Integrations, DevOps and Studio Operations

• Second line: Regulatory and Technical Compliance, Governance, Legal and Data Protection

• External: accredited test laboratories, certification bodies and regulatory authorities

Main Requirements

• Minimum two years in gaming or iGaming, ideally B2B, supporting a portfolio of certified products and platforms; live studio exposure an advantage

• Direct dealings with accredited test laboratories and certification bodies across readiness, submission, findings tracking and closure

• A record of translating regulatory or scheme requirements into technical requirements that first-line teams could implement

• Managing certification and compliance gaps through to evidenced closure, including remediation planning and follow-up

• Multi-jurisdictional B2B licensing exposure across three or more regulated markets

• ISO/IEC 27001 ISMS operation, control design and evidence practice

• Working understanding of RNG and game certification, live studio technical standards and platform architecture

Skills and attributes

• Precise analytical reading of regulatory text, clear on what is mandatory, what is recommended and what is interpretation

• Structured writing - requirements, gap analyses, impact assessments and audit correspondence that stand up to external scrutiny

• Organised across parallel certification timelines, and able to hold a defensible position with external bodies and internal stakeholders

• Comfortable using AI tools for research, analysis and documentation, with the judgement to verify output before relying on it

• A second-line mindset: evidence over assertion, and independence from the activity being assessed

• Education and certifications

• Degree in business, management or computer science, or equivalent professional experience - ideal

• ISO/IEC 27001 Lead Auditor or Lead Implementer - beneficial

CISA, CRISC or equivalent - advantageous

What’s in it for you?

• Experience a dynamic and team-orientated work environment

• Opportunities for personal growth and learning

• An open, inclusive and supportive team where you will be valued, and your suggestions will be welcome

• 24 days paid holiday per year, in addition to local public holidays

• Birthday Leave, a paid day off in the month of your birthday

• Competitive Salary

• Hybrid Working (3 days office/2 days home)

• Risk Benefits such as Private Medical Insurance and Life Assurance (2x annual salary)

• Annual Wellness Allowance

• Team Building Opportunities

• Monthly Lunch Allowance

• Parking (limited)

• Local discounts and more…

Our team is committed to keeping remuneration and benefits under constant review to make sure what we offer stays relevant.