Security Systems & Compliance Specialist
Listed on 2026-03-05
-
Security
Cybersecurity, Information Security
Location:
Lakeland, FL, US, 33815
Requisition
Brightstar is an innovative, forward‑thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best‑in‑class lottery operations, retail and digital solutions, and award‑winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities.
Brightstar has a well‑established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility. Brightstar has approximately 6,000 employees. For more information, please visit
As a Security Systems & Compliance Specialist, you'll be responsible for managing the organization’s occupational safety, physical security, information security, and business resilience compliance programs. This includes maintaining compliance with ISO 45001 (Occupational Health & Safety Management Systems), SOC 1 and SOC 2 audit frameworks, ISO 27001 (Information Security Management Systems), ISO 50001 (Energy Management Systems), and the company’s Business Resilience Planning (BRP).
The specialist supports audits, incident management, risk assessments, security compliance activities, and documentation to ensure a safe, secure, and resilient operating environment.
- ISO 45001 – Occupational Health & Safety Management Systems:
Provides a framework for identifying, controlling, and reducing workplace hazards, promoting employee well‑being, and achieving continual improvement in safety performance. Responsibilities include hazard assessments, safety documentation, and audit readiness. - SOC 1 – System and Organization Controls (Financial Reporting):
Ensures internal controls over financial reporting are designed and operating effectively, particularly where systems or processes impact client financial data. - SOC 2 – System and Organization Controls (Security, Availability, Processing Integrity, Confidentiality, and Privacy):
Ensures adequate controls for protecting client data across security domains. Responsibilities include control documentation, evidence gathering, and audit coordination. - ISO 27001 – Information Security Management Systems:
Focuses on protecting confidentiality, integrity, and availability of information through risk assessment, security policies, incident management, and continuous security improvements. - ISO 50001 – Energy Management Systems:
Provides a systematic approach for improving energy performance, energy use monitoring, and implementing operational controls that reduce environmental and energy impacts. - Business Resilience Planning (BRP):
Ensures organizational readiness and recovery capabilities through business continuity planning, emergency response development, risk mitigation strategies, and periodic scenario testing.
- Conduct internal audits, inspections, and risk assessments related to safety, information security, and physical security.
- Maintain incident logs, corrective action tracking, root‑cause analyses, and regulatory documentation.
- Support development and testing of emergency response, crisis management, and business continuity plans.
- Perform compliance reporting for senior management and external stakeholders.
- Evaluate safety/security controls for effectiveness and identify improvement opportunities.
- Interact with internal and external auditors, investigators, and client representatives.
- Develop and deliver training programs for safety, security, and business resilience.
- Support physical and product security programs, including documentation review, compliance checks, and coordination with security operations.
- Assist with the review of security incidents, discrepancies, and investigation reports.
- Support compliance with regulatory and client‑specific security requirements.
- Establish objectives and measure results for assigned areas.
- Identify training needs and recommend development plans.
- Perform…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).