Role:

The Data & Access Governance Specialist sits within the Flutter International security team, reporting to the Department Head, Data and Access Security.

The Data & Access Governance Specialist is responsible to ensure Data and Access Security policies compliance for Flutter International. Engages with the business to facilitate application onboarding to existing IAM tools and ensures Data Security controls are incorporated into business processes.

The role will involve a mix of analysis of business systems in the context of Data and Access security, assessment of controls against Data and Access policies and driving improvements with business stakeholders.

Accountabilities:

• Help internal stakeholders understand the risk appetite for Data & Access Security and manage their products and data accordingly.
• Consult in the design, implementation and operation of business processes and services where Data is sensitive and/or high risk with guidance on Data & Access Security controls.
• Engage with business stakeholders to ensure the timely collection of the technical information required to onboard relevant applications into Flutter International Identity and Access Management tool –
• Ensure Flutter International sensitive data remains protected in line with GDPR, Policy and other compliance requirements across all Flutter International systems.
• Ensure low friction and efficient use of Data Loss Prevention controls to support the business.
• Support or manage the Data Loss Prevention controls and services across Flutter International, including Web, Email and Endpoint, alongside any new tooling.
• Recommend appropriate security controls and risk mitigation strategies for the entire data life cycle.
• Work with the System Owners to ensure their applications are onboarded to the access review process as defined by the Security Policies.
• Manage access review campaigns within SailPoint ensuring timely completion.
• Ensure user lifecycle events governance within the Identity and Access Management tool: joiner, mover, leaver.
• Drive continuous improvements to existing access governance processes
• Support the business with Data Loss Prevention incidents as per the agreed procedures

Key Strengths:

• Ability to engage and collaborate with various stakeholders within the business
• Excellent verbal and written communications skills with the ability to modify style to influence technical and business stake holders
• Good stakeholder management skills to drive improvement of data & access security controls
• A proactive team approach, who takes initiative to resolve problems.
• Delivery driven with a sensible attitude to risk
• High level understanding of various IT processes and technologies (cloud, virtualization, databases, networking, software development, risk management)
• Proficient level of spoken and written English (B2, C1) (fluency in English is necessary)

Nice to have:

• Good understanding of Data Loss Prevention and Identity & Access governance processes and tools
• Understanding of security processes and controls
• Knowledge and ease of working with security policies and standards
• Hands-on experience in either IT or security is desirable
• Passionate about technology and display energy and enthusiasm for the Data & Access Security discipline

What you can expect:

• 25 days of annual leave
• Sharesave scheme
• „Flexible Benefits” of your choice
• Private health insurance (includes dental insurance and health assessments)
• Free parking
• Thousands of courses online through ‘Udemy'

Ways of working:

Flexible working is our way of working! We're a diverse workforce and therefore a 'one size fits all' approach isn't necessarily best. Whatever your personal needs may be, let's have a chat and see how we can accommodate them.

We thank all applicants for their interest, however only the suitable candidates will be contacted for an interview.
By submitting your application online, you agree that: your details will be used to progress your application for employment. If your application is successful, your details will be used to administer your personnel record.If your application is unsuccessful, we will retain your details for a period no longer than two years, in order to consider you for prospective Paddy Power Betfair role.