Senior Cyber Risk Analyst

ABOUT FANDUEL FanDuel Group ("FanDuel") is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the United States, FanDuel consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media.

FanDuel has a presence across all 50 states with approximately 17 million customers and 28 retail locations. FanDuel is based in New York with offices in New Jersey , Georgia, California, Oregon, Canada and Scotland. Its networks FanDuel TV and FanDuel are broadly distributed on linear cable television and through its relationships with leading direct-to-consumer over-the-top platforms.

FanDuel Group is a subsidiary of Flutter Entertainment plc, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT). THE ROSTER… At FanDuel, we give fans a new and innovative way to interact with their favorite games, sports and teams. We're dedicated to building a winning team and we pride ourselves on being able to make every moment mean more, especially when it comes to your career.

So, what does "winning" look like at FanDuel? It's recognition for your hard-earned results, a culture that brings out your best work—and a roster full of talented coworkers. Make no mistake, we are here to win, but we believe in winning right.

That means we'll never compromise when it comes to looking out for our teammates. From creatives professionals to cutting edge technology innovators, FanDuel offers a wide range of career opportunities, best in class benefits, and the tools to explore and grow into your best selves. At FanDuel, our principle of "We Are One Team" runs through all our offices across the globe, and you can expect to be a part of an exciting company with many opportunities to grow and be successful.

THE POSITION Our roster has an opening with your name on it FanDuel is looking to add a Senior Cyber Risk Analyst to its Cyber Risk team to help ensure risks are proactively identified, assessed, centrally managed, shepherded to reach an agreed risk treatment and regularly reported. The Senior Cyber Risk Analyst will report to the Cyber GRC Director within FanDuel's Cybersecurity team and will play a pivotal role in evaluating and enhancing the company's overall cybersecurity risk posture. THE GAME PLAN Everyone on our team has a part to play • Conduct comprehensive cybersecurity risk assessments to identify potential threats and vulnerabilities with the company's business critical assets (people, process, technology, and data). • Build and maintain a cybersecurity risk register and manage end-to-end risk and issue remediation processes, collaborating with relevant teams to implement effective mitigation strategies. • Develop and maintain a robust risk management framework, ensuring alignment with industry best practices and regulatory requirements (e.g., GLI, NIST CSF, ISO, SOX, SOC2, PCI). • Analyze and report cybersecurity risk metrics to senior management, providing insights and recommendations for risk mitigation, utilizing qualitative and quantitative techniques to periodically measure the company's cybersecurity risk posture. • Build and maintain processes to identify, assess, and continuously monitor the company's Tech & Cyber Top Risks In collaboration with Enterprise Risk teams: o Maintain a comprehensive repository of these risks, ensuring accurate documentation and progress updates are captured to ensure risk profiles are kept up to date o Collaborate with risk owners and other cross-functional teams to develop and implement mitigation strategies and controls aligned with industry best practices that are tailored to the company's risk appetite. o Track and report progress on risk remediation efforts, providing timely updates to management and stakeholders. • Stay abreast of evolving cybersecurity threats, trends, and technologies to enhance risk management strategies. • Lead cross-functional discussions and workshops to enhance risk awareness and foster a proactive risk management culture. • Collaborate with internal and external stakeholders to ensure effective communication and understanding of risk management initiatives. • Assist with special risk assessment and department initiatives, as assigned. • Mentor and guide junior team members, sharing expertise and promoting continuous professional development.

THE STATS What we're looking for in our next teammate Bachelor's degree preferred in a technical field (e.g., Cybersecurity, Information Technology) or equivalent combination of education, training, and relevant experience. Minimum of 5 years of hands-on experience in conducting cybersecurity risk assessments. Proven track record in managing end-to-end risk and issue remediation processes.

Experience executing and managing cybersecurity assessments in a heavily regulated industry. Easily adapt to a rapidly evolving, fast-paced, Information Security environment as it relates to changes in strategy or risks. Strong understanding of cybersecurity best practices, principles, tools, and security industry control frameworks (e.g., GLI, NIST CSF, ISO, SOX, SOC2, PCI, CIS Critical Controls). Experience with data governance and privacy regulations (e.g., GDPR, local state regulations) Strong knowledge of qualitative and quantitative risk management methodogies (e.g., NIST RMF / 800-37 / 800-30, FAIR). Strong analytical skills and the ability to translate complex technical risks into business terms.

Excellent communication skills with the ability to articulate risk insights to both technical and non-technical stakeholders. Relevant professional certifications such as CISA, CISSP, CISM, or CRISC are preferred. Strong project management skills and the ability to prioritize and manage multiple tasks simultaneously.

Ability to cultivate relationships with cross functional teams to promote collaboration and cohesiveness. Experience with using GRC platforms. PLAYER BENEFITS We treat our team right From our many opportunities for professional development to our generous insurance and paid leave policies, we're committed to making sure our employees get as much out of FanDuel as we ask them to give.

Competitive compensation is just the beginning. As part of our team, you can expect: An exciting and fun environment committed to driving real growth Opportunities to build really cool products that fans love Mentorship and professional development resources to help you refine your game Be well, save well and live well - with FanDuel Total Rewards your benefits are one highlight reel after another FanDuel is an equal opportunities employer and we believe, as one of our principal states, "We Are One Team" We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, Veteran status, or another other characteristic protected by state, local or federal law.

We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included. We want our team to include diverse individuals because diversity of thought, diversity of perspectives, and diversity of experiences leads to better performance. Having a diverse and inclusive workforce is a core value that we believe makes FanDuel stronger and more competitive as One Team The applicable salary range for this position is $126,000 - $158,000, which is dependent on a variety of factors including relevant experience, location, business needs and market demand.

This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes flexible time off (including unlimited paid time off for full-time employees) and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws." LI-Hybrid