Technology Risk & Assurance Officer

About the role

Flutter Central & Eastern Europe (CEE) is expanding its technology hub and seeks a Technology Risk & Assurance Officer to lead the implementation and maintenance of the Technology Governance, Risk, and Compliance (GRC) framework across its brands, including Adjarabet and MaxBet. Reporting to the Technology GRC Director, you will provide independent second‑line oversight, conduct risk assessments, and ensure regulatory compliance.

Key responsibilities

• Oversee technology and cyber risk management activities, ensuring effective implementation and monitoring of controls.
• Perform periodic assessments, control testing, and assurance activities in line with established plans.
• Support first‑line technology and cyber teams in identifying, assessing, and managing risks while adhering to internal policies and regulatory requirements.
• Review and align technology policies, standards, and procedures with group minimum standards and best practices.
• Conduct compliance assessments against frameworks such as NIST CSF 2.0, ISO/IEC 27001, COBIT, ITIL, NIS2, and PCI DSS, collecting evidence and reporting findings.
• Report on security and technology risk posture, highlighting key risks, trends, and mitigation strategies.
• Perform data maturity assessments to support overall data management practices.

Required profile

• Minimum of 4 years of professional experience in technology governance, risk management, and compliance.
• Strong background in evaluating technology controls and aligning them with group standards and regulatory requirements.

Required skills

• Knowledge of NIST Cybersecurity Framework (CSF) 2.0.
• Familiarity with ISO/IEC 27001.
• Experience with COBIT.
• Understanding of ITIL processes.
• Awareness of NIS2 directive requirements.
• Experience with PCI DSS compliance.