Senior Cyber GRC Policy & Governance Analyst - Flutter Functions, Hybrid & Remote

Senior Cyber GRC Policy &amp; Governance Analyst - Flutter Functions, Hybrid &amp; Remote<p></p><p></p><p></p><p></p>Cyber Security Analyst Mid 2<p></p><p></p><p><b><span>About Betfair Romania Development</span></b><span><span>​</span><span>:</span></span><span> </span></p><p><span> </span></p><p><span><span>Betfair Romania Development is the largest technology hub of Flutter Entertainment, with over 2,000 people powering the world’s leading sports betting and iGaming brands. Exciting, </span><span>immersive</span><span> and safe experiences are delivered to over 18 million customers worldwide, from our office in Cluj-Napoca. Driven by relentless innovation and commitment to excellence, we </span><span>operate</span><span> our own unbeatable portfolio of diverse proprietary brands such as FanDuel, PokerStars, </span><span>SportsBet</span><span>, Betfair, Paddy Power, or Sky Betting &amp; Gaming,</span></span><span> </span></p><p><span> </span></p><p><b><span>Our Values</span><span>:</span></b><span> </span></p><p><span><span>The values we share at Betfair Romania Development define what makes us unique as a team. They empower us by giving meaning to our contributions, and they ensure that we consistently strive for excellence in everything we do. We are looking for passionate individuals who align with our </span><span>values and are comm</span><span>itted to making a difference.</span></span><span> </span></p><p><b><span>Win together | Raise the bar | Got your back | Own it | Positive impact</span></b><span> </span></p><p></p><p><b>About Flutter Functions</b></p><p>The Flutter Functions division is a key component of Flutter Entertainment, responsible for providing essential support and services across the organization. The division encompasses various corporate functions, including finance, legal, human resources, technology, and more, ensuring seamless operations and strategic alignment throughout the company.</p><p></p><p><b><span>Role Overview</span><span>:</span></b><span> </span></p><p>As a <b>Senior Cyber GRC Policy &amp; Governance Analyst</b> reporting to the Cyber Security GRC Senior Manager (Governance &amp; Risk), you will play a key role in Flutter’s Cyber GRC team and drive the development and maintenance of cyber security policies, frameworks and supporting documentation. You will ensure alignment with regulatory requirements, industry best practices, and Flutter’s risk management framework.</p><p></p><p><span> </span></p><p><b><span>Key Accountabilities &amp; Responsibilities</span><span>:</span></b><span> </span></p><ul><li>Draft, collect feedback from relevant stakeholders and obtain sign-off for cyber security documentation in alignment with industry frameworks (e.g. NIST, ISO 27001).</li><li>Ensure policies reflect the current threat landscape, compliance requirements, and business operating models.</li><li>Coordinate periodic reviews of all cyber security documentation to maintain relevance and accuracy.</li><li>Maintain a central repository for policies and related governance documents.</li><li>Work with risk owners to assess and document policy exemptions and ensure obtaining sign-offs for risk acceptances.</li><li>Support internal and external audits by making the requested documentation available.</li><li>Collaborate with cyber security, legal, compliance, technology, and business teams to ensure policy alignment and applicability.</li><li>Provide guidance and clarification on policy requirements and support awareness campaigns or training programs to promote understanding and adoption.</li><li>Engage with stakeholders to collect feedback on policy effectiveness and identify opportunities for improvement</li><li>Support the creation of governance dashboards and reports to communicate policy status, exceptions, and trends to senior stakeholders.</li><li>Track policy lifecycle metrics, including policy review schedules, exceptions, and implementation timelines.</li><li>Contribute to the ongoing development of the cyber security governance framework and support GRC initiatives.</li><li>Monitor emerging threats, regulatory changes, and industry standards to assess potential impacts on existing policies.</li><li>Partner with GRC teams across the group to ensure a unified and consistent cyber policy &amp; framework governance approach.</li><li>Build strong relationships with cyber, technology, and business stakeholders to ensure policy governance activities are embedded and effective.</li><li>Maintain deep awareness of divisional risk profiles, control environments, and operating models.</li><li>Promote a cyber compliance-aware culture through thought leadership and practical engagement.</li></ul><p></p><p><b><span>Skills, Capabilities &amp; Experience Required</span><span>:</span></b><span> </span></p><ul><li>Minimum 3 years’ experience in information security.</li><li>Experience in creating and managing policies, procedures, and governance documentation.</li><li>Understanding of indust