Senior Technical Compliance Analyst

At Draft Kings, AI is becoming an integral part of both our present and future, powering how work gets done today, guiding smarter decisions, and sparking bold ideas. It’s transforming how we enhance customer experiences, streamline operations, and unlock new possibilities. Our teams are energized by innovation and readily embrace emerging technology. We’re not waiting for the future to arrive. We’re shaping it, one bold step at a time.

To those who see AI as a driver of progress, come build the future together.

As a Senior Technical Compliance Analyst, you’ll strengthen our technical compliance programs and help teams stay ready for audits, certifications, and evolving regulatory requirements. You’ll own key compliance domains from end to end, translating complex requirements into practical controls and scalable processes that support the business. Working across Engineering, Security, Legal, Compliance, Internal Audit, and other teams, you’ll shape evidence strategies, validate controls, address risks, and provide clear guidance to stakeholders.

Your work will also help advance our governance, risk, and compliance capabilities through stronger tooling, automation, and repeatable processes.

• Own assigned technical compliance domains across frameworks such as Service Organization Control 2 (SOC
  2), International Organization for Standardization (ISO) 27001, Payment Card Industry Data Security Standard (PCI DSS), Sarbanes-Oxley Information Technology General Controls (SOX ITGC), National Institute of Standards and Technology (NIST), and other relevant requirements.

• Lead audit and certification activities from planning through completion, coordinating timelines, deliverables, evidence collection, control validation, and responses across technical teams.

• Partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to assess control design and implementation, address audit questions, and resolve identified gaps.

• Translate regulatory, contractual, and certification requirements into practical technical controls, scalable workflows, and clear guidance for stakeholders.

• Build evidence strategies that improve the quality, completeness, reusability, and efficiency of audit and assessment processes.

• Identify compliance risks and control gaps, establish clear remediation ownership, track progress, and drive open issues through resolution.

• Develop program health metrics, audit status reporting, and leadership-ready insights that provide visibility into compliance performance and emerging risks.

• Advance our governance, risk, and compliance capabilities through improved tooling, automation, repeatable evidence-gathering processes, and post-audit improvements while sharing expertise and supporting consistent execution across the team.

• A Bachelor’s Degree in Computer Science, Information Technology, or a related field, with at least 5 years of experience in technical compliance, information technology audit, security compliance, privacy compliance, risk management, or governance within a technology-driven or regulated environment.

• Working knowledge of compliance and security frameworks such as SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, or similar standards.

• Experience leading or supporting audit readiness, evidence collection, control validation, remediation tracking, and external audits or certification activities.

• Technical fluency across areas such as access management, change management, vulnerability management, logging and monitoring, incident response, data protection, cloud infrastructure, and secure development.

• Experience assessing control design and implementation and translating compliance requirements into clear technical and operational expectations.

• Experience writing scripts, including Python, and using artificial intelligence tools to automate evidence collection, control testing, or compliance workflows is a plus.

• Strong stakeholder management and communication skills, with the ability to influence across teams and explain compliance requirements, risks, and remediation needs to technical and non-technical audiences.

• A…