Senior Technology Regulatory & Controls Analyst
September 5
🏢 In-office - Manhattan
Description
• FanDuel is looking to add a Senior Technology Regulatory & Controls Analyst to its Technology Regulatory & Controls team to help drive our first line of defense (1LOD) technology & cyber controls function. • You will play a key role on the Technology GRC team, with responsibility for ensuring technology & cyber compliance practices are appropriately managed and adequately scaled within the Technology BU. • This includes ensuring FanDuel’s technology & cyber controls are adequately designed and implemented in a robust and effective manner, coordinating relevant compliance obligations & assessments (e.g., PCI, SOC2), advising on relevant audit and regulatory activities (e.g., SOX, Internal Audit, GLI, State Regulatory exams) and driving issues management and related remediation activities. • The Senior Technology Controls Analyst will partner and collaborate with other 1LOD functions, relevant tech & cyber leadership, second line of defense (2LOD) teams (e.g., Enterprise Risk, Regulatory Compliance, and Group Oversight) for alignment with 2LOD Divisional and 2LOD Group policies and strategies, and third line of defense (3LOD) teams (e.g., Internal Audit, External Audit). • The Senior Technology Controls Analyst will report to the Technology Controls Manager and will play a pivotal role in evaluating and enhancing the company’s overall technology and cybersecurity control environment and its readiness to meet its increasing regulatory obligations.
Requirements
• Bachelor’s degree preferred in a technical field (e.g., Cybersecurity, Information Technology) or equivalent combination of education, training, and relevant experience. • 5 years related experience in technology and cybersecurity Governance, Risk, and Compliance. • “Stay Hungry, Stay Humble” mindset that strives to continuously learn and share new skills with others, and embraces a steep learning curve to understand our business and technology drivers to get the job done • “Anything Is Possible” attitude that is highly organized and results-driven to solve our most important challenges • Comfortable navigating shifting priorities in a fast-paced environment, with the ability to work independently with minimal supervision while also as an exceptional team player that excels at cultivating relationships and promoting collaboration and cohesiveness to fulfill our “We Are One Team” principle • Hands-on experience executing and managing IT and security audits or regulatory assessments in a heavily regulated industry, including writing, documenting, and assessing risks/controls and drafting business process summaries for executives • IT audit and regulatory compliance experience, including guiding and monitoring plan of actions and milestones. • Strong IT & security risk domain knowledge of technology and cybersecurity best practices, principles, tools, and industry control frameworks (e.g., GLI, NIST CSF, ISO, SOX, SOC2, PCI, CIS Critical Controls, COBIT, ITIL, CMMI) • Experience with data governance and privacy regulations and industry frameworks (e.g., GDPR, local state regulations, DAMA-DMBOK) • Ability to translate risk/control standards into functional business requirements • Strong written and verbal communication skills to articulate risk/control insights to both technical and non-technical stakeholders • Proficient working with Microsoft Office, GRC and project management tools (e.g., JIRA, ZenGRC) • Experience working as a consultant in the risk, compliance, or audit space is a plus • Relevant professional certifications such as PCI ISA/QSA, CISA, CISM/CISSP, CCSK/CCSP, Security+ are preferred
Benefits
• An exciting and fun environment committed to driving real growth • Opportunities to build really cool products that fans love • Mentorship and professional development resources to help you refine your game • Be well, save well and live well - with FanDuel Total Rewards your benefits are one highlight reel after another
Apply Now
