Head of Threat & Intelligence and Incident Response

Head of Threat & Intelligence and Incident Response
We are considering applicants in – London/Leeds/Dublin
Style of work – Hybrid 2 days per week
 

As out new Head of Threat & intelligence and incident response you will lead the Flutter Cyber Operations & Response team and be a part of the Flutter cyber Leadership Team.

The role will provide leadership and domain expertise to design, implementation and management of cybersecurity operational capability across the group.

The Head of Threat & Intelligence and Incident Response will provide strong leadership: supporting and challenging the team to be their best selves, whilst developing talent through career progression.

The role will supervise and direct the x-divisional response team's actions as well as act as the single point of contact for the given incident.

The role leads the Group Operational Security function by strengthening the cyber security resourcing and capabilities to enable secure and innovative Flutter operations.

The role is responsible to build the strategy and the operation of the best in class operational cyber security to stay ahead of the threat landscape, enabling secure, innovative solutions for Flutter.

Who are we?

Flutter is the world’s leading online sports betting and iGaming operator, with a market leading position in the US and across the world. Our ambition is to leverage our significant scale and our challenger mindset to change our industry for the better. By Changing the Game, we believe we can deliver long-term growth while promoting a positive, sustainable future for all our stakeholders. We are well-placed to do so through the distinctive, global advantages of the Flutter Edge, which gives our brands access to group-wide benefits to stay ahead of the competition, as well as our clear vision for sustainability through our Positive Impact Plan. Flutter operates a diverse portfolio of leading online sports betting and iGaming brands including FanDuel, Sky Betting & Gaming, Sportsbet, PokerStars, Paddy Power, Sisal, tombola, Betfair, MaxBet, Junglee Games and Adjarabet. 

On May 31 2024 Flutter moved its primary listing to the New York Stock Exchange. With a greater proportion of our future profits expected to be generated in the US, and given FanDuel’s #1 position in that market, we believe a US primary listing is the natural home for the Group. 

Responsible for:

• Set the strategy for the Flutter Global Operational Cyber Security, based on the company objectives and risk appetite.

• Cover a wide range of security areas and find the best global solutions based on the strategic vision and analysis.

• Lead the intelligence program within Flutter Group and develop a firm-wide intelligence standard.

• Provide end-to-end global accountability of timely and accurate intelligence analysis that enables Flutter to mitigate threats across the globe and in support of our security, crisis management, and investigative programs and responsibilities.

• Develop and maintain an intelligence strategy for the firm and ensure execution of that strategy.

• Serve as a key member of the Flutter cyber leadership team and work closely at all levels across business functions and with multiple constituents.

• Build and maintain relationships with similar intelligence teams across the private sector and with appropriate government agencies.

• Manage strategic, specialized, and complex intelligence analysis for various Flutter functions and businesses.

• Demonstrate situational judgment and interpersonal and networking skills to collaboratively build strong working relationships with intelligence partners internal and external to Flutter.

• Demonstrate ability to lead teams that review large bodies of information and synthesize for inclusion in comprehensive, relevant briefings under tight time constraints.

• Prioritize and perform multiple tasks; change focus quickly as demands change in a fast-paced, time constrained environment.

• Provide direct strategic management guidance to Flutter senior leadership and leaders across Divisions and functions.

• Inspire results and accountability across all levels of the team, while encouraging high standards and stressing the importance of continuous development.

• Handle budget, year-end compensation pool and expense approvals for the team.

• Translate multi-year goals into fundamental key performance indicators to diagnose trends and support business decisions.

• Assess risk appropriately when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Flutter Group, its customers and assets, by driving compliance with applicable laws, rules and regulations, adhering to policy, applying sound ethical judgment regarding conduct and business practices, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

• A deep understanding of the intelligence cycle and its application in a dynamic and complex environment.

• Lead a team of skilled professionals with expertise in intelligence, governance, budgets and financing, technology, training, risk, and control management.

• Cocreate with key brand and divisional decision makers the strategy, following the business objectives. Promote cyber security resilience and reduce the incidence and severity of cyber security breaches

• Influence and manage divisional senior stakeholders and the group the most effective solutions to achieve the final global outcome. Build and present cases for future strategic investments.

• Work with domain experts and external partners to assess cyber security risks and threats facing Flutter to ensure divisions cyber security maturity and threat landscape is well understood

• Develop the cross-divisional strategic security testing program to support more systematic assessments of the effectiveness of cyber defences (people, processes, and technology) and identification of vulnerabilities and exposure to malware

• Work with divisions to build effective cyber security response and recovery plans, including crisis management coordination, planning, playbooks and toolkit. Test cyber security incident recovery capabilities with internal and external stakeholders (Divisional system participants, External third parties, etc.) to ensure approaches are consistently used in all scenarios.

• Coordinate joint initiatives with the divisions to modernise and promote the resiliency of divisional and cross divisional technologies

• Test and enhance Flutter’s ability to respond and recover from a ransomware attack, or any other cyber scenario. Coordinate top table exercises for Exco, senior stakeholders, and technical teams

• Lead and coordinate cross divisional Incident response and recovery exercises with internal and external stakeholders. Support Group Crisis Response planning and Data Protection and simulation exercises with specific focus on cyber security

• Provide management of incidents that impact multiple Divisions in coordination with divisional security incident management. Handle cross-divisional cyber security issues efficiently through co-ordination and communication with all stakeholders affected

• Ensure recovery from cyber incidents occurs within an appropriate timeframe including proper communications with both external and internal parties

• Responsible for measurement and reporting of divisional and cross-divisional security incident metrics

• Enhance the tools and data used to analyse, assess, and communicate cyber security threats and vulnerabilities to increase understanding of critical system cyber security vulnerabilities

• Work closely with key public- and private-sector partners, security forums and peer organisations to develop expertise, share best practices, and collaborate on cyber security risk mitigation strategies, policies, and regulations initiatives

• Build cross-divisional capability to ensure forensic investigation is performed effectively. This can include implementing enhanced processes and tools, and retain cyber forensic and technical experts, to conduct effective investigations

Key requirements:

• A solid background in cyber security with extensive expertise in incident management

• Several years experience as a leader in a complex organisation

• A deep understanding of the intelligence cycle and its application in a dynamic and complex environment.

• Experience in driving pivotal initiatives, organisational change and delivering results.

• Experience in managing team(s) of excellent problem-solvers with a technical, organizational, and analytical approach.

• Proven influencing, communication, and consulting skills.

• Experience in operations areas: Organizational management, project management, business operations, technology, conducting/supervising internal investigations, insider threat, security matters, and crisis management.

• Independent problem solver with strong analytical and problem-solving skills.

• Experience translating, communicating, and applying business strategies and objectives within own area of responsibility, ensuring that functional teams are aligned to overall strategy and objectives.

• Experience in directing and working with teams within a federated organization.

• Skilled leader, mentor, coach.

• Strong presentation and communication skills including communications (written and verbal) with senior-level management.

• Experience of operating and succeeding within a fast-paced online/ecommerce organization

• Demonstrable experience of creating effective long-term strategies for cyber security services, and efficiently implementing them by influencing and leading others.

• Demonstrable experience of leading programmes of work successfully that contribute to the achievement of strategic objectives

• Extensive experience of internal and external stakeholder management

• A solid background in cyber security with expertise across all areas or a more detailed in focus in one or more areas

• Ability to negotiate robustly with strategic vendors to ensure we take full advantage of our scale to manage costs and get value for money

• Strong working knowledge and experience of current IT Security frameworks such as ISO 27001, PCI, NIST, ISF, UKGC and Data Protection, SEC regulation, AI Act 2024

• Strategic planning which can translate to a long-range vision for driving down Cyber Security risk across the divisions.

B enefits:

• Uncapped Holiday Allowance (you read that right!)

• Enhanced Pension Scheme (please ask for your location, and we will share)

• Bonus Scheme

• Life Assurance

• Income protection

• Private healthcare (with option to add dependent)

• £/₤1,000 annual self-development learning fund & Access to thousands of Udemy courses

• Invest via the Company Share save Scheme, Discount vouchers, Volunteering days.

• Enhanced Parental Leave and paid time off for appointments.

• Reward portal eg. electric car scheme, gym membership discounts etc.

• Wellbeing scheme

• On-site Gym, Canteen and Gaming area plus many more!

At Flutter we’re working to be an inclusive employer, and we encourage people from all backgrounds, ways of thinking and working to apply. Everyone brings different perspectives and experiences; you don't have to meet all the requirements listed to apply for this role.

If you need any adjustments to make this role work for you let us know, and we’ll see how we can accommodate them.

Our Work Experience is the combination of everything that's unique about us: our culture, our core values, our company meetings, our commitment to sustainability, our recognition programs, but most importantly, it's our people. Our employees are self-disciplined, hardworking, curious, trustworthy, humble, and truthful. They make choices according to what is best for the team, they live for opportunities to collaborate and make a difference, and they make us one of the Top Workplaces in the area.