ABOUT FANDUEL

FanDuel Group ("FanDuel") is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the United States, FanDuel consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media.

FanDuel has a presence across all 50 states with approximately 17 million customers and 28 retail locations. FanDuel is based in New York with offices in New Jersey , Georgia, California, Oregon, Canada and Scotland.

Its networks FanDuel TV and FanDuel+ are broadly distributed on linear cable television and through its relationships with leading direct-to-consumer over-the-top platforms.

• Develop and maintain a risk-based technology & cyber control program to design, implement, and monitor the effectiveness of key controls across the Technology organization, ensuring alignment with FanDuel's Enterprise Risk Management frameworks, and relevant industry best practices and regulatory requirements
• Work closely with the Technology Risk team and the 2LOD Enterprise Risk team to maintain FanDuel's technology & cyber risk and controls framework ensuring that it is adequately designed, adopted and operating effectively
• Work closely with senior leadership across all three lines of defense, to support the continued maturation of the control environment
• Serve as the Technology organization's first line point of contact for regulatory and compliance activities
• Act as a primary liaison between audit teams and control stakeholders to ensure clear communication of requirements, timelines, and expectations during audit and assessment activities.
• Advise and support technology and cyber control owners during regulatory examinations or internal audits / assessments to ensure accurate and efficient outcomes - including clarifying scope, expectations and timelines, coordinating meetings, facilitating evidence gathering, clarifying issues with relevant SMEs & stakeholders, and developing necessary action plans and management responses
• Track issues throughout their lifecycle - from initial identification and evaluation to response, mitigation and reporting
• Support new data governance and data quality initiatives to bolster data-related control requirements
• Conduct or participate in periodic 1LOD control assurance activities including control rationalization exercises, process / risk / control documentation reviews, post incident reviews to evaluate root cause(s) and recommend mitigation / control improvements, etc.
• Develop and deliver periodic reporting of technology & cyber control health and issue management
• Stay abreast of evolving technology & cybersecurity threats, news, and trends to enhance internal control strategies.
• Lead cross-functional discussions and workshops to enhance awareness and foster continuous improvement of the technology & cyber control environment
• Utilize enhanced data, technology and cyber capabilities to perform quality assurance activities, as applicable
• Develop and deliver tailored training and communications on relevant regulatory and controls obligations for the technology & cyber community, as needed
• Assist with special regulatory and control assessment and department initiatives, as assigned
• Maintain procedures, playbooks, virtual webpages, and metrics dashboards
• Mentor and guide junior team members, sharing expertise and promoting continuous professional development

• Bachelor's degree preferred in a technical field (e.g., Cybersecurity, Information Technology) or equivalent combination of education, training, and relevant experience.
• 5 years related experience in technology and cybersecurity Governance, Risk, and Compliance.
• "Stay Hungry, Stay Humble" mindset that strives to continuously learn and share new skills with others, and embraces a steep learning curve to understand our business and technology drivers to get the job done
• "Anything Is Possible" attitude that is highly organized and results-driven to solve our most important challenges
• Comfortable navigating shifting priorities in a fast-paced environment, with the ability to work independently with minimal supervision while also as an exceptional team player that excels at cultivating relationships and promoting collaboration and cohesiveness to fulfill our "We Are One Team" principle
• Hands-on experience executing and managing IT and security audits or regulatory assessments in a heavily regulated industry, including writing, documenting, and assessing risks/controls and drafting business process summaries for executives
• IT audit and regulatory compliance experience, including guiding and monitoring plan of actions and milestones.
• Strong IT & security risk domain knowledge of technology and cybersecurity best practices, principles, tools, and industry control frameworks (e.g., GLI, NIST CSF, ISO, SOX, SOC2, PCI, CIS Critical Controls, COBIT, ITIL, CMMI)
• Experience with data governance and privacy regulations and industry frameworks (e.g., GDPR, local state regulations, DAMA-DMBOK)
• Ability to translate risk/control standards into functional business requirements
• Strong written and verbal communication skills to articulate risk/control insights to both technical and non-technical stakeholders
• Proficient working with Microsoft Office, GRC and project management tools (e.g., JIRA, ZenGRC)
• Experience working as a consultant in the risk, compliance, or audit space is a plus
• Relevant professional certifications such as PCI ISA/QSA, CISA, CISM/CISSP, CCSK/CCSP, Security+ are preferred

• An exciting and fun environment committed to driving real growth
• Opportunities to build really cool products that fans love
• Mentorship and professional development resources to help you refine your game
• Be well, save well and live well - with FanDuel Total Rewards your benefits are one highlight reel after another