Senior Technology Risk Analyst
The Technology Risk Analyst role supports the management of cyber and technology risks by identifying, documenting, assessing, and reporting risks, while ensuring effective risk management processes and collaboration with stakeholders.
The Technology Risk Analyst supports the organisation’s cyber and technology risk management by identifying, documenting, assessing, and reporting risks. The role involves running risk review activities, maintaining risk documentation, tracking actions, and collaborating with stakeholders to ensure risks are clearly communicated and effectively managed across technology functions.
Be part of the InfoSec Risk team responsible for supporting and maturing the technology and cyber risk management function for the PokerStars brand. Support the development, implementation, and ongoing management of a robust and scalable risk management framework across Flutter UK and Ireland.
Plan, run, and document technology and cyber risk review workshops, ensuring risks are clearly identified, assessed, and captured. Maintain and review risk registers and supporting documentation, ensuring accuracy, consistency, and timely updates. Track risk treatment actions and exemptions, engaging with stakeholders to obtain regular updates and drive timely closure.
Guide and support technology stakeholders on how to identify, assess, manage, and communicate their risks effectively. Build and maintain strong working relationships with stakeholders at all levels to ensure clear ownership and accountability for risk management activities. Create, manage, and maintain structured documentation libraries, including version control, naming conventions, and supporting evidence.
Support the production of risk reporting and presentations that clearly articulate the risk posture and key issues to relevant audiences. Contribute to the continuous improvement of risk management processes, tools, and ways of working. Collaborate closely with the wider Information Security Governance, Risk, and Compliance community across Flutter.
Play a key role in strengthening the overall maturity of information security risk management within a highly regulated environment. Track risk treatment actions and remediation plans across PokerStars 3rd parties. Support the ISMS team during key projects and initiatives.
- Plan, run, and document technology and cyber risk review workshops, ensuring risks are clearly identified, assessed, and captured.
- Maintain and review risk registers and supporting documentation, ensuring accuracy, consistency, and timely updates.
- Track risk treatment actions and exemptions, engaging with stakeholders to obtain regular updates and drive timely closure.
- Guide and support technology stakeholders on how to identify, assess, manage, and communicate their risks effectively.
- Build and maintain strong working relationships with stakeholders at all levels to ensure clear ownership and accountability for risk management activities.
- Create, manage, and maintain structured documentation libraries, including version control, naming conventions, and supporting evidence.
- Support the production of risk reporting and presentations that clearly articulate the risk posture and key issues to relevant audiences.
- Contribute to the continuous improvement of risk management processes, tools, and ways of working.
- Collaborate closely with the wider Information Security Governance, Risk, and Compliance community across Flutter.
- Play a key role in strengthening the overall maturity of information security risk management within a highly regulated environment.
- Track risk treatment actions and remediation plans across PokerStars 3rd parties.
- Support the ISMS team during key projects and initiatives.
- Bachelor Degree in either Engineering, Computer Science, or Mathematics (required)
- 4 - 7 years of experience within a Technology/Cyber environment with exposure to cyber & technology risk/GRC (required)
- Experience organising, running and documenting risk meetings/workshops (required)
- Experience interacting with and challenging stakeholders at all levels with regards to risk assessments (required)
- Experience documenting/scoring risks and maintaining risk registers (required)
- Experience managing exemptions in relation to cyber control deficiencies (required)
- Strong organisational skills and experience including version control, library structure and naming conventions (required)
- Proficient with Excel, PowerPoint, SharePoint, and Confluence (required)
- Any knowledge and experience of Industry Cyber frameworks such as ISO27001/2, NIST CSF, ISF SoGP, CIS, AWS Cloud Adoption Framework (CAF) is desirable (nice-to-have)
- A formal qualification such as ISO27001 auditor, CRISC, CCSP, CISA, CISSP is desirable (nice-to-have)
- Experience working within a highly regulated industry (required)
- Experience in the online gambling industry and experience of gambling regulatory requirements is a definite advantage (nice-to-have)
- Discretionary annual performance bonus
- 30 days paid leave
- Health and Dental Insurance for you, your partner and your children (if you all live at the same address)
- Personal life insurance and disability coverage
- Wellbeing fund
- Continuous learning support for certifications and career growth
- 26 weeks primary carer leave at 100% pay & 4 weeks secondary carer leave pay at 100% pay, no eligibility period applies
- A sports’ card membership valid across the country
- Discounts as a compliment form us among different services
- Monthly food vouchers
Flutter International is the international division of Flutter Entertainment, the world's leading online sports betting and gaming company. It operates a portfolio of brands including PokerStars, Betfair International, Adjarabet, Sisal, Snai, Betnacional, Junglee Games and MaxBet across markets outside the UK, Ireland, US and Australia. The division combines world-class brands with global scale and a challenger mindset, drawing on shared capabilities the group calls the "Flutter Edge". Flutter Entertainment is listed on the New York Stock Exchange and London Stock Exchange.
