Security Governance & Assurance Analyst – Flutter UKI

Responsibilities

• Day‑to‑day delivery of Flutter UKI's external compliance programmes (ISO 27001, PCI DSS, SOX).
• Facilitation of second‑ and third‑line audits: NIST CSF 2.0, Internal Audit, UKI Risk & Assurance assessments.
• Assist the ISMS & Policy Manager with ISO 27001 audits and the annual review cycle, withdrawal of policies and standards.
• Understand UKI Tech & Infosec principles and support the team in delivering on these.

• Solid understanding of regulatory compliance frameworks such as Sarbanes‑Oxley, PCI DSS, ISO 27001, NIST CSF 2.0, GDPR.
• Experienced in successfully delivering and facilitating multiple projects/pieces of work simultaneously, re‑prioritising as appropriate to meet deadlines with a pragmatic approach.
• Well versed in risk management and has a sound understanding of how controls are implemented in line with business risk appetite & regulatory need.
• Can demonstrate the communication of complex technical matters to both tech/non‑tech audiences, internally and externally (auditors).
• Can easily navigate internal/external audit & compliance engagements, along with supporting controls testing & evidencing requirements.
• Ability to identify key issues & can communicate them to stakeholders leveraging colleagues as needed to find solutions.
• Understand the people & cultural aspects of information security.

• ISO 27001
• PCI DSS
• SOX
• NIST CSF 2.0
• GDPR
• Risk management
• Controls testing

• Project management
• Communication
• Problem‑solving
• Stakeholder management
• Pragmatic approach