Group Third Party Risk Manager

Third Party Risk Manager

We are considering applicants in Leeds.
Style of work – Hybrid 2 days per week.

Who are we?
Flutter Entertainment is the world’s leading online sports betting and gaming company with a market capitalization of c. $37bn operating some of the most innovative, diverse and distinctive brands in the sector. A constituent of both the London FTSE 100 and New York Stock Exchange, Flutter brings entertainment to life for over 20 million customers in a safe, responsible and sustainable way. Operating in 20+ regulated markets, through our Positive Impact Plan, we are committed to making a positive contribution for our customers, colleagues, communities and the planet.

Your new role will involve

1. Driving the rollout of the Flutter Cyber Security Third Party Supplier Assurance program across the group.
2. Defining and embedding the operating model of the Cyber Security Third Party Risk program including processes for new supplier security risk assessment, existing supplier security risk assessment, and termination activities.
3. Ensuring risks relevant to the Flutter group are identified in line with the overall Flutter risk appetite.
4. Working with divisions to define the approach to the management of third-party risk using established risk management processes.
5. Collaborating with Senior Managers within TPR – Technical Operational Compliance to ensure technical assessment processes and remediation tracking are driving continuous improvements.
6. Working with procurement and legal teams to ensure security contract clauses reflect group requirements.
7. Defining the high-level requirements for regular governance activities to ensure third parties are managed appropriately.
8. Ensuring data required for other risk reporting functions is accurately delivered on time.
9. Designing relevant metrics and KPIs for the Cyber Security Third Party Risk program.
10. Proactively managing the development of team members to ensure a highly productive and proficient team.
11. Participating in governance and oversight forums/committees as required.
12. Building and maintaining relationships with key stakeholders across the group.

Key Skills

1. An experienced information security governance, risk & compliance professional with a deep understanding of third-party cyber security risk.
2. Experience of supplier contract negotiations, security controls, industry standard security processes (ISO27001), and personal data regulations (e.g. GDPR).
3. Experience performing risk assessments of the supply chain and articulating the risk.
4. Results-oriented with the ability to influence outcomes with pragmatic recommendations.
5. A working knowledge of current IT Security standards such as ISO 27001, PCI, NIST, ISF, UKGC, and Data Protection.
6. Inquisitive, disciplined, and logical thinker with strong investigative and analytical qualities.
7. Excellent verbal and written communication skills with a flexible attitude.
8. Able to adapt communication style and appreciate different perspectives.
9. Ability to multi-task and strong relationship building skills.

Benefits

1. Uncapped Holiday Allowance.
2. Enhanced Pension Scheme.
3. Bonus Scheme.
4. Life Assurance.
5. Income protection.
6. Private healthcare (with option to add dependents).
7. £/₤1,000 annual self-development learning fund & access to thousands of Udemy courses.
8. Invest via the Company Share Save Scheme, Discount vouchers, Volunteering days.
9. Enhanced Parental Leave Policy and paid time off for appointments.
10. Reward portal e.g. electric car scheme, gym membership discounts.
11. On-site Gym, Canteen and Gaming area.

At Flutter we’re working to be an inclusive employer, and we encourage people from all backgrounds to apply. If you need any adjustments to make this role work for you let us know, and we’ll see how we can accommodate them.