Why we need you:

The Information Security Team within International is on a journey to increase its capability and maturity. The information security function exists to ensure that the products we build for our players are secure and to protect all the sensitive information assets that we hold. We also provide assurance and oversight of technology-related Risk across our Technology function. Working in a highly regulated environment the Governance, Risk and Compliance function within Information Security plays a vital part in assuring Information Security and Technology controls are documented, well-managed and are operating in compliance with both internal and external requirements.

Who we're looking for:

• You will play an important role within the Risk and Assurance team that is part of the Information Security Governance, Risk and Compliance function.
• The Risk and Assurance function is responsible for managing the Technology Risk Working Group, providing assurance to Group Technology controls and the main contact for all relevant Group functions including Group Risk, Group Internal Audit and Group Technology.
• You will contribute to the efficient management of these responsibilities including producing agendas, minutes, meeting materials, metrics, progress updates and ensuring associated actions are delivered within the deadlines.  
• You will be involved in the evaluation of the design and effectiveness of controls protecting Flutter International external and internal networks, systems, applications, user access controls, mobile device applications as well as data coding standards.

Your skills and experience:

• 4+ years' experience of working in a technical/information security risk management and audit-related role
• Proven experience of risk assessments, audit and control testing
• Proven experience of working in a highly regulated industry.
• A solid understanding of all aspects of Information Technology and how this works within a large global organisation.
• Experience of change delivery
• Familiarity with IT and Information Security standards (NIST, ISO27001, CIS benchmarks etc).
• Knowledge and experience of security principles, technologies, and frameworks.
• Proven experience of report building skills with various office products (Excel, Power Point, Visio, etc)
• Proven documentation skills including library structures with products such as Confluence, JIRA, SharePoint, OneDrive
• A formal qualification such as CRISC, CISA, CISSP are desirable.
• Experience working within the online gambling industry and experience of gambling regulatory requirements is a definite advantage.
• Exposure to industry standard Risk Assessment approaches such as NIST 800-30, IRAM2 would be considered an advantage
• Knowledge of ITIL and Agile methodology will be considered an advantage
• Knowledge how to use and maintain GRC tools will be considered an advantage
• Proficient in spoken and written English

Your behaviours:

• You are a problem solver, helping craft usable and repeatable processes and solutions.
• You are a team player and happy to take ownership and responsibility.
• You have a natural ability when working across teams and functions to persuade and influence others.
• You have a desire to deliver results.
• You're a strong communicator who can build successful stakeholder relationships with business owners and product teams, project managers, IT teams, Legal and Compliance and Risk functions.
• You enjoy working in a dynamic, collaborative, transparent, non-hierarchal culture.
• You thrive in a fast-paced, outcome driven organisation.

• 25 days of annual leave;
• Sharesave scheme;
• „Flexible Benefits” of your choice;
• Private health insurance (includes dental insurance and health assessments);
• Free parking;
• Thousands of courses online through ‘Udemy';
• Working from home options.

Ways of working: