Security Governance & Assurance Analyst - Flutter UKI, Hybrid (Fixed-term, 6 months)
This position is open across multiple Flutter UK & Ireland office locations. The benefits and package will be in line with the entity in your location. Your Talent Partner will discuss this in further detail. An exciting opportunity has opened up for a Security Governance and Assurance Analyst to join the team, initially as a 6-Month Fixed-Term Contract covering maternity leave. The role reporting into the Senior Governance & Assurance Manager - UKI, the Security Governance and Assurance Analyst will be responsible for the day to day delivery of the tech workstream for Flutter UKI's audits and assessments.
What you'll do
- Responsible for day-to-day delivery of some of Flutter UKI's external compliance programmes, which may include ISO 27001, PCI DSS and SOX.
- Responsible for facilitation of some of our other second and third line audits e.g. NIST CSF 2.0, Internal Audit, UKI Risk & Assurance assessments.
- Assisting the ISMS & Policy Manager as required with the ISO 27001 audits and the creation, annual review cycle, withdrawal of policies and standards.
- Understands the UKI Tech & Infosec principles and supports the team in delivering on these.
How you'll do it
- Solid understanding of regulatory compliance frameworks such as Sarbanes-Oxley, PCI DSS, ISO27001, NIST CSF 2.0, GDPR.
- Experienced in successfully delivering and facilitating multiple projects / pieces of work simultaneously, re-prioritising as appropriate to meet deadlines with a pragmatic approach.
- Well versed in risk management and has a sound understanding of how controls are implemented in line with business risk appetite & regulatory need.
- Can demonstrate the communication of complex technical matters to both tech/non-tech audiences, both internally and externally (auditors).
- Can easily navigate internal/external audit & compliance engagements, along with supporting controls testing & evidencing requirements.
- Ability to identify key issues & can communicate them to stakeholders leveraging colleagues as needed to find solutions.
- Understand the people & cultural aspects to information security.
- Assertive, results orientated and good attention to detail.
Competencies Required
- Hungry for Results: Achieves results at pace with energy and drive; consistently achieves and exceeds expectations; takes accountability and always delivers on what has been promised; action orientated, agile in approach, calls out when things go wrong; sets stretch goals and holds self and others to high standards of performance; demonstrates rigour and commitment to activities; always acts with integrity and invests in building trust with all stakeholders.
- Wins Together: Is a team player- by working collaboratively is able to establish and engage networks to achieve shared objectives; acting as a key support whenever possible; effectively communicates and shares information to ensure others are fully informed; praises others for their contributions and accomplishments; gains trust and support of others.
- Resilient: Maintains excellent composure and professionalism even in very difficult situations; confident under pressure, handles and manages crises effectively; bounces back from setbacks and acts as a role model for others; maintains a positive attitude despite adversity; skilfully handles challenges and obstacles applying insights from others and lessons learned from mistakes.
- Game changer: Remains curious and generates new and useful ideas or solutions to solve challenges; is open to innovations and gets involved in unfamiliar tasks or new areas; learns new methods, tools and technologies and applies them to work.
- Nimble: Quickly understands and adapts well to new and unfamiliar situations or challenges; consistently performs experiments to find the best solution; learns from others' experiences and shares lessons learned from own mistakes; is transparent about failure and views mistakes as opportunities to learn.
- Quality decision maker: Considers all relevant factors and uses appropriate decision-making criteria and principles; takes smart, independent action in urgent and unusual situations; collaborates effectively to speed up decision making and clearly understands when to elevate to others; shares ideas and applies insights from experienced team members on how to address new situations; comfortable giving opinions and takes decisive action; strives for excellence.
- Effective communicator: Is effective in a variety of communication settings; one-on-one, F2F, virtual meetings, small and large groups, or among diverse styles; actively listens to others and takes opinions and ideas on board; demonstrates humility in their dealings with others; provides timely and helpful information to others across the organisation.