Cybersecurity IT Auditor

Cybersecurity IT Auditor

Contract- 8 Months

Onsite- Hybrid -2 -3 days a week

Purpose of Role:

As a Cybersecurity and IT Auditor you will be responsible for reviewing that the operations of Entain adhere to our Cybersecurity and Technical Compliance requirements, designing and implementing improvements to address identified gaps and to help adapt the security posture of the organisation to the evolving global threat and regulatory landscape.

Primary Responsibilities:

• Manage IT and Information Security audits across the global Entain business:

• • Gaming regulations IT and Cybersecurity requirements

• • GLI-33b and ISO27001 compliance-MUST

• • PCI-DSS compliance-MUST

• • M&A due diligence and post-acquisition Cybersecurity alignment

• • Third-party supplier Cybersecurity

• Coordinate multiple concurrent external IT and Cybersecurity audits in support of several stakeholders:

• • Regulatory compliance
  • Finance
  • B2B partners
  • Stock exchange listing requirements

• Partner with the business to coordinate and conduct Cybersecurity risk assessments

• Lead the Technology Compliance program workstream to support the entry of Entain into new Gaming jurisdictions and B2B partnerships

• Design Cybersecurity controls to adapt to new emerging threats and challenges

• Design and implement improvements to Cybersecurity processes and controls to increase their effectiveness

• Design and implement changes in the Technology platform to align with Cybersecurity compliance requirements

• Lead Cybersecurity discussions with regulators, B2B partners and other external stakeholders as a subject matter expert

• Analyze existing and upcoming IT, Product and Cybersecurity regulatory obligations and translate these into Entain policies, processes and controls

• Execute projects to implement the group Technical Compliance strategy

• This role performance will directly impact the costs of bringing our technology and applications aligned with jurisdictional regulatory requirements, participating in key decisions to enter new markets

Knowledge/Expertise/Qualifications:

Essential AND MUST

• At least three years' experience in a similar role, working in the following areas:

• • IT and Cybersecurity Audits
  • ISO 27001
  • GLI-33b
  • PCI DSS
  • Risk management

• Excellent knowledge of Cybersecurity processes as well as outstanding technical knowledge of the underlying technical foundations

• Customer-oriented person, with the ability to educate a non-technical audience on Technical Compliance and Cybersecurity subjects

• Jurisdictional compliance knowledge: NJDGE, NGCB, PGCB, etc. This person needs to be familiar with US Compliance regulations.

Desired

• Previous experience in security consultancy

• Familiar with global Security Standards such as SOC, NIST etc

• Relevant professional qualifications will be considered, although not a requirement, e.g. CISA, CISM, CISSP, GIAC, PCI ISA etc.

• Online Gaming experience working with regulations such as UKGC, DGE, ARJEL, LGA, DGOJ, GRA etc.