Technical Compliance Officer - Malta

The business supplies a live casino platform and content into multiple regulated markets, each with its own technical standards, certification scheme and evidentiary expectations. The Technical Compliance Officer - Certifications translates those obligations into testable technical requirements, owns the certification lifecycle end to end - readiness, submission, findings closure, surveillance and recertification - and is the primary interface with accredited test laboratories, certification bodies and regulatory authorities.

As a second-line role it does not operate first-line controls. It defines the compliance position in technical terms, tests whether the evidence supports that position, and reports certification risk with proposed treatment.

Purpose

Certification and technical standards obligations across the licence portfolio, currently Malta (MGA), Isle of Man (GSC) and Curacao (CGA), and all certification engagements with accredited test laboratories. Scope extends to new markets as the licence footprint grows.

Main Responsibilities

Regulatory Research and Technical Translation

    Maintain a current view of the technical standards, certification schemes and regulatory instruments applying to a B2B platform and content supplier in each market in scope

    Translate regulatory text into testable technical requirements and control objectives that first-line teams can act on without further interpretation

    Run gap analyses against current posture and issue risk-ranked remediation plans naming the deliverables required to close

Requirement-to-Control Traceability

    Maintain traceability from each regulatory requirement to the control that satisfies it and the artefact that evidences it, across all jurisdictions in scope

    Keep the mapping current as requirements, controls and platform architecture change, so that certification questions are answered from the register rather than reconstructed under time pressure

    Validate mapping completeness ahead of each certification milestone and resolve unmapped or unevidenced requirements with the first line before submission

Certification and Audit Management

    Maintain a forward certification calendar by standard, jurisdiction and certified asset, sequenced against commercial expansion plans and licence renewal dates

    Run pre-audit readiness assessments and assemble submission packs - technical documentation, control evidence and test results - to the standard each body expects

    Act as primary point of contact for certification bodies and regulatory authorities, managing scope, queries, timelines, proposals and invoicing

    Track findings and non-conformities through to verified closure, and manage surveillance, change notification and recertification obligations

Regulatory Change Management

    Assess the technical impact of regulatory and scheme changes on the control environment, the certified asset base and existing certifications

    Issue impact assessments stating what has changed, which controls and assets are affected, what must be done and by when

    Maintain traceability from notification through to implementation and evidence, so that the position taken on any change can be reconstructed and defended

Risk Reporting and Cross-Functional Support

    Own certification and technical compliance entries in the compliance risk register as an independent second-line assessment of exposure, treatment and status

    Report certification risk and readiness to the compliance forum with proposed treatment, escalating where evidence gaps or timelines put a licence or a market at risk

    Brief first-line teams on the jurisdiction-specific requirements bearing on their work, and support new market entry with technical feasibility assessments and realistic certification timelines

Key Relationships

    First line: Product, Engineering, Integrations, DevOps and Studio Operations

    Second line: Regulatory and Technical Compliance, Governance, Legal and Data Protection

    External: accredited test laboratories, certification bodies and regulatory authorities

Main Requirements

    Minimum two years in gaming or iGaming, ideally B2B, supporting a portfolio of certified products and platforms; live studio exposure an advantage

    Direct dealings with accredited test laboratories and certification bodies across readiness, submission, findings tracking and closure

    A record of translating regulatory or scheme requirements into technical requirements that first-line teams could implement

    Managing certification and compliance gaps through to evidenced closure, including remediation planning and follow-up

    Multi-jurisdictional B2B licensing exposure across three or more regulated markets

    ISO/IEC 27001 ISMS operation, control design and evidence practice

    Working understanding of RNG and game certification, live studio technical standards and platform architecture

Skills and attributes

    Precise analytical reading of regulatory text, clear on what is mandatory, what is recommended and what is interpretation

    Structured writing - requirements, gap analyses, impact assessments and audit correspondence that stand up to external scrutiny

    Organised across parallel certification timelines, and able to hold a defensible position with external bodies and internal stakeholders

    Comfortable using AI tools for research, analysis and documentation, with the judgement to verify output before relying on it

    A second-line mindset: evidence over assertion, and independence from the activity being assessed

    Education and certifications

    Degree in business, management or computer science, or equivalent professional experience - ideal

    ISO/IEC 27001 Lead Auditor or Lead Implementer - beneficial

CISA, CRISC or equivalent - advantageous

What’s in it for you?

    Experience a dynamic and team-orientated work environment

    Opportunities for personal growth and learning

    An open, inclusive and supportive team where you will be valued, and your suggestions will be welcome

    24 days paid holiday per year, in addition to local public holidays

    Birthday Leave, a paid day off in the month of your birthday

    Competitive Salary

    Hybrid Working (3 days office/2 days home)

    Risk Benefits such as Private Medical Insurance and Life Assurance (2x annual salary)

    Annual Wellness Allowance

    Team Building Opportunities

    Monthly Lunch Allowance

    Parking (limited)

    Local discounts and more…

    Our team is committed to keeping remuneration and benefits under constant review to make sure what we offer stays relevant.