Security Governance & Assurance Analyst - UKI, Hybrid

Security Governance & Assurance Analyst - Flutter UKI, Hybrid (Fixed-term, 6 months)

Located in Flutter UK & Ireland, the role is a 6‑month fixed‑term contract covering maternity leave and requires travel as necessary.

Reporting into the Senior Governance & Assurance Manager – UKI, the Analyst will manage the day‑to‑day delivery of Flutter UKI’s external compliance programmes, including ISO 27001, Sarbanes‑Oxley (SOX), NIST CSF 2.0 and PCI DSS, and internal 2nd and 3rd line assessments. Responsibilities include coordinating stakeholder communication, facilitating audits, collecting and validating evidence, overseeing remedial action, and collaborating with the ISMS & Policy Manager to ope rationalise first‑line controls and reporting.

• Deliver day‑to‑day compliance programmes such as ISO 27001, PCI DSS and SOX.
• Facilitate second and third line audits including NIST CSF 2.0, internal audit and UKI Risk & Assurance assessments.
• Assist the ISMS & Policy Manager with ISO 27001 audits and the annual review cycle, withdrawal and adoption of policies and standards.
• Apply UKI Tech & Infosec principles to support the team in delivery.

• Strong knowledge of regulatory compliance frameworks:
  Sarbanes‑Oxley, PCI DSS, ISO 27001, NIST CSF 2.0, GDPR.
• Skilled at delivering and facilitating multiple projects simultaneously, re‑prioritising to meet deadlines.
• Proficient in risk management and implementation of controls in line with business risk appetite.
• Effective communication of complex technical matters to tech and non‑tech audiences, internally and with external auditors.
• Experienced in audit and compliance engagement navigation, controls testing and evidencing.
• Identifies key issues and communicates solutions to stakeholders.
• Understands the people and cultural aspects of information security.
• Assertive, results‑oriented with strong attention to detail.

• Hungry for Results
  :
  Achieves results at pace, takes accountability, and maintains high performance standards.
• Wins Together
  :
  Collaborates, shares information, and builds trust within the team.
• Resilient
  :
  Maintains composure under pressure, handles crises, and learns from setbacks.
• Game Changer
  :
  Generates innovative ideas, embraces new tasks, and applies new technologies.
• Nimble
  :
  Adapts quickly, experiments with solutions, and learns from mistakes.
• Quality Decision Maker
  :
  Uses sound decision‑making criteria, escalates appropriately, and seeks excellence.
• Effective Communicator
  :
  Communicates clearly across diverse settings, listens, and shares timely information.