Security Governance & Assurance Analyst (Leeds)

An exciting opportunity has opened up for a Security Governance and Assurance Analyst to join the team, initially as a 6-Month Fixed-Term Contract covering maternity leave.

Reporting into the Senior Governance & Assurance Manager – UKI, the Security Governance and Assurance Analyst will be responsible for the day-to-day delivery of the tech workstream for Flutter UKI’s audits and assessments. This position will work with stakeholders to ensure the regulatory demands upon the Tech teams are delivered, working closely with key internal and external stakeholders including auditors to ensure compliance.

The Security Governance and Assurance Analyst will independently manage the assessments, working with 2nd and 3rd line teams to ensure requests are sent out in a timely manner, evidence is received and meets the standard required for evidential assurance. The role will work closely with the ISMS & Policy Manager on the coordination of Compliance programmes and define and operationalise 1st line security controls and reporting within UKI. In addition, the role will help to drive the creation, review and adoption of InfoSec policies and standards.

Therefore, there is an expectation of travel with this role, as required.

• Responsible for facilitation of some of our other second and third line audits e.g. NIST CSF 2.0, Internal Audit, UKI Risk & Assurance assessments.
• Assisting the ISMS & Policy Manager as required with the ISO 27001 audits and the creation, annual review cycle, withdrawal of policies and standards.
• Solid understanding of regulatory compliance frameworks such as Sarbanes-Oxley, PCI DSS, ISO27001, NIST CSF 2.0, GDPR.
• Experienced in successfully delivering and facilitating multiple projects / pieces of work simultaneously, re-prioritising as appropriate to meet deadlines with a pragmatic approach.
• Well versed in risk management and has a sound understanding of how controls are implemented in line with business risk appetite & regulatory need.
• Can easily navigate internal/external audit & compliance engagements, along with supporting controls testing & evidencing requirements.
• Understand the people & cultural aspects to information security.
• Action orientated, agile in approach, calls out when things go wrong; sets stretch goals and holds self and others to high standards of performance; always acts with integrity and invests in building trust with all stakeholders.
• Wins Together: Is a team player- by working collaboratively is able to establish and engage networks to achieve shared objectives.
• Game changer: Quality decision maker: takes smart, independent action in urgent and unusual situations; one-on-one, F2F, virtual meetings, small and large groups, or among diverse styles.

Flutter is the world’s leading online sports betting and iGaming operator, with a market leading position in the US and across the world. By Changing the Game, we believe we can deliver long-term growth while promoting a positive, sustainable future for the industry.

Flutter operates a diverse portfolio of leading online sports betting and iGaming brands including FanDuel, Sky Betting & Gaming, Sportsbet, PokerStars, Paddy Power, Sisal, tombola, Betfair, MaxBet, Junglee Games and Adjarabet.

The UK & Ireland region of Flutter unites some of the biggest brands in the betting and gaming industry; When we’re free to be ourselves, we thrive and unleash our unique talents —creating a culture that empowers our people to change the game.