One Global Business...
Flutter Entertainment plc is a market-leading international sports betting company which operates six of the world's leading brands : Paddy Power, Betfair, Sportsbet, FanDuel, TVG and Adjarabet for over 10m customers.
The Group was formed from the 2016 merger of Paddy Power plc and Betfair Group plc and received immediate inclusion in the FTSE 100 index of the London Stock Exchange.
The Group's purpose is to bring excitement to life for our customers in a safe, responsible and ultimately sustainable way.
Role purpose :
This role requires a highly skilled technology expert responsible for the design and implementation of security technologies and ensuring alignment with the Flutter Technology strategy.
The role will contribute, as and when required, in the evaluation and in the selection of the technologies, tools, architecture models, components required to achieve our group security objectives.
The Security Engineer will need to review, assess and define security requirements (including sign off) for the Flutter Group Functions Projects, based on the risk appetite, international standards, compliance requirements and internal risk frameworks;
Work with Flutter Control Assurance team to ensure alignment with the Flutter Security Framework;
Liaise between the Group Functions and the UK&I division who provides security capabilities to Flutter Group Functions (Identity and Access Management, Privilege Access Management and Data Security);
Define formal provisioning and consumption model for delegated services, including SLA's monitoring and ways of working;
Responsible for Data Security for Flutter Group Functions, providing assessment, expertise and requirements to ensure protection of the Flutter Group Functions' sensitive assets;
Develop plans for global security technologies that integrate effectively with other aspects of the technical infrastructure;
Facilitate the development and communication of Flutter Group security standards for systems design, development and deployment;
Use and promote systems and operational security design methodologies;
Trusted business partner to encourage interaction from the area (answer ad-hoc questions, share security expertise, improve security of processes, improve security understanding of the business area)
Ownership to create and to drive adoption of security operations procedures / RunBooks and infrastructure standards and policies;
Perform risk assessments and raise risks for cyber vulnerabilities identified within Flutter Group Functions;
Build and maintain relationships with key stakeholders across the group;
Understand the area's people, process & technology to provide enhanced security consultancy, faster reviews and better engagement;
On-call likely to be introduced in the future
Big Thinker : Constantly explores and analyses future scenarios and possibilities to help Flutter respond to change and shape the future;
drives self and others to pursue opportunities that will create sustainable value for Flutter; contributes to the functional and the Flutter strategy, mapping and aligning efforts to strategic imperatives.
Effective Communicator : Provides clarity on business goals; is effective in all types of communication; adjusts communication style to fit the audience;
consistently communicates the mission, vision and values to inspire, energies and motivate others throughout Flutter; ensures others understand how their efforts positively impact the bigger picture;
creates an environment that encourages effective communication and the sharing of diverse perspectives.
Commercially Savvy : Makes it their business to be aware and anticipate emerging external factors and changing market dynamics;
constantly explores and analyses future scenarios and possibilities to help Flutter respond to change and shape the future;
has deep understanding of business drivers and the industry to guide decisions and lead others.
Customer Obsessed : Builds and maintains strong relationships with stakeholders; champions the needs of customers and the importance of exceeding expectations;
builds and delivers solutions that exceed customer expectations; prioritizes customer satisfaction and builds commitment in others to provide outstanding service.
Wins Together : Gains trust and support of others, generous with time, advice and knowledge; is able to establish and engage networks to get stuff done rather than depend on authority;
seeks out opportunities to break down barriers and collaborate and partner across organizational boundaries.
Resilient : Creates a climate where people are curious, resilient, determined, learn and adapt; handles and manages crises effectively;
anticipates and shows the way forward during setbacks; builds energy in others to stick with it / to stay on track / push through.
Experience as part of a complex architecture / development practice, working on multiple large and complex projects simultaneously
Experience and knowledge on Cloud Technologies (Amazon, Microsoft, Google), Virtualisation (Openstack, VMWare, XEN), advanced network and firewall technologies, SSO, Windows and Linux Servers, web applications, CI / CD / devops toolingStrong understanding of Infrastructure Security threats, vulnerabilities and best practices.
Ability to help people to clearly and accurately articulate complex threats and risks, controls and mitigations.
Drive risk management in the area to improve security risk oversight and more informed security decision making. Also by escalating significant issues to accountable stakeholders and driving successful outcomes alongside them.
Hands on experience in security systems, including authentication systems, data loss prevention systems, log management and other relevant systems
Excellent understanding of the latest security principles, techniques, and protocols
Awareness of current IT Security standards such as ISO 27001, PCI, NIST, ISF, Data Protection
Experience in managing global distributed processes with matrix responsibilities