Technology and Cyber Risk Analyst – Risk Operations

Role Overview

• Support the UKI Regional Technical and Cyber Risk Team in delivering cyber risk management activities across PokerStars, Tombola, and PPB/SBG
• Support the organisation and documentation of risk review workshops and meetings with stakeholders
• Capture and document risks from stakeholder discussions and assessments
• Maintain risk registers and related documentation with accuracy and attention to detail
• Support the scoring and categorisation of risks under guidance from the Senior Analyst or Lead
• Track risk actions and obtain updates from stakeholders
• Ensure version control, library structure, and naming conventions are consistently applied
• Support the preparation of risk reports and dashboards for stakeholder review
• Assist in the creation of risk narratives and presentations that communicate risk stories
• Compile and organise risk data for reporting purposes
• Support the maintenance of audit trails and documentation supporting risk assessments
• Help identify trends and patterns in risk data under guidance
• Support the development and maintenance of risk reporting templates and processes
• Support stakeholder engagement activities and maintain regular communication on risk matters
• Assist in guiding stakeholders on how to identify, capture, and assess their risks
• Communicate risk management expectations to stakeholders
• Escalate issues and questions to the Senior Analyst or Lead for resolution
• Build positive working relationships with technology stakeholders across regional brands
• Support the implementation of risk management frameworks and processes
• Assist in maintaining risk management tooling, templates, and documentation
• Help identify process improvements and inefficiencies
• Contribute to the organisation and maintenance of risk management systems and libraries
• Support administrative tasks related to risk management activities
• Develop foundational knowledge of cyber risk frameworks (ISO 27001/2, NIST CSF, ISF SoGP, CIS, AWS CAF)
• Support compliance reviews and audits related to technology and cyber risk
• Learn about industry standards, regulatory requirements, and cyber risk management practices
• Develop understanding of gambling regulatory requirements

Requirements

• Circa 1-2 years of experience within a Technology/Cyber environment
• Exposure to cyber risk, GRC, or compliance management (desirable)
• Experience organising, running, and documenting meetings and workshops
• Strong organisational skills and attention to detail
• Proficient with Excel, PowerPoint, SharePoint, and Confluence
• Ability to learn quickly and apply new concepts
• Any knowledge and experience of industry cyber frameworks such as ISO 27001/2, NIST CSF, ISF SoGP, CIS, AWS Cloud Adoption Framework (CAF) (desirable but not required)
• Formal qualifications such as ISO 27001 auditor, CRISC, CCSP, CISA, or CISSP (desirable but not required)
• Experience working within a highly regulated industry
• Definite advantage: Experience in the online gambling industry and knowledge of gambling regulatory requirements

Tech Stack

• AWS
• Cloud

Benefits

• Hybrid & remote working options
• €1,000 per year for self-development
• Company share scheme
• 25 days of annual leave per year
• 20 days per year to work abroad
• 5 personal days/year
• Flexible benefits: travel, sports, hobbies
• Extended health, dental and travel insurances
• Customized well-being programmes
• Career growth sessions
• Thousands of online courses through Udemy
• A variety of engaging office events