Risk and Compliance Officer (12 Months FTC)

Allwyn UK; Watford; On-site; GBP 40,000 - 70,000; Full time

Job summary

A lottery operator in the UK is seeking a Risk and Compliance Officer to enhance their security governance and compliance efforts. This role involves performing risk assessments, managing compliance with legislation like ISO27001 and DPA, and supporting audits. Ideal candidates will have a strong understanding of Information Security principles and demonstrate excellent attention to detail. The position offers an opportunity to contribute significantly to the integrity of one of the UK's most visited websites.

Benefits

Company bonus scheme

Matched pension contributions up to 8.5%

26 days annual leave + 2 Life Days

Complimentary Private Medical

Life Assurance

Enhanced Maternity & Paternity leave

£500 wellness allowance

Access to nutritional advisor

Discounted Health Assessments

Complimentary Financial coaching

Qualifications

• Proven experience in Information Security, Risk, and Compliance.
• Experience with frameworks like ISO27001 and PCI-DSS.
• Ability to work independently and in teams.

Responsibilities

• Conduct risk assessments and manage risk registers.
• Ensure compliance with regulatory requirements.
• Prepare and support security audits.

Skills

Information Security understanding

Knowledge of UK Data Protection law

Security governance and compliance experience

Attention to detail

Ability to articulate complex issues

Education

Degree in Information Security or related field

Tools

Python

Job description

Join our journey to create a new experience for The National Lottery and help us to power change for the greater good.

We are Allwyn UK, part of the Allwyn Entertainment Group – a multi‑national lottery operator with a market‑leading presence across Europe which includes: Czech Republic, Austria, Greece, Cyprus & Italy.

While the main contribution of The National Lottery to society is through the funds to good causes, at Allwyn we put our purpose and values at the heart of everything we do. Join us as we embark on a once‑in‑a‑lifetime, largescale transformation journey by creating a National Lottery that delivers more money to good causes.

We’ll talk a bit more about us further down the page, but for now – let’s talk about the role and who we’re looking for…

A bit about the role…

The Risk and Compliance Officer is a vital part of the Security Governance, Risk and Compliance team. This role will be responsible for:

• Undertaking risk assessments and managing the local and functional risk registers. Ensuring risks are identified, raised and managed in accordance with the Enterprise Risk Management Framework, actions are agreed and delivered on time, and information is kept up to date and accurate
• Managing and maturing the Third party Risk Management Policy and Framework
• Providing support and oversight with regards to the Identity and Access Management Framework, ensuring high quality output and access control findings are remediated within a timely manner
• Ensuring Allwyn remains compliant with the relevant legislative, regulatory and business requirements, as well as any latest versions of the frameworks/ standards/ requirements (such as Licence 4, ISO27001, WLA:SCS, PCI‑DSS and DPA 2018)
• Facilitating, managing and being part of security and privacy audits (both internally and externally). Ensuring evidence is readily available - and findings / areas of improvements are implemented into BAU in order to mitigate the risks associated
• Secretariat for Governance Committees whilst collating information, metrics and support writing the relevant governance papers
• Enhancing Alwyn's Security culture by conducting ongoing training and awareness of various related threat topics.

Team Description:

The Allwyn’s security team’s purpose is to protect the integrity of the National Lottery and to do so we work in a heavily regulated environment and have to secure one of the most visited websites in the UK, a very large retail channel and numerous back office systems spread across both on premise data centers and in the cloud.

What experience we’re looking for…

This role will be well suited to someone who has experience and knowledge working within Information Security, risk and compliance for a while leading on all aspects of GRC including:

• Ability to demonstrate good understanding in the field of Information Security in terms of concepts, standards, frameworks and technologies
• Good understanding of the UK Data Protection legislation and principles
• Experience with security governance and compliance requirements (e.g. DPA, PCI‑DSS, ISO27001)
• Experience with working both individually with minimal supervision, and working as a part of larger teams on projects of varying complexities
• Ability to articulate technical /complex or sensitive issues / risks to a wide audience and manage them in accordance with wider frameworks
• An excellent level of attention to detail, and a strong sense of ownership
• Demonstrable experience with learning and applying new concepts quickly
• Thirst to learn

Highly desirable:

• Information security management qualifications or degrees such as a BSC or MSC in Information Security - or CISM, CISSP or equivalent is highly desirable
• Python knowledge / experience

About us:

We’ve developed ground‑breaking technologies, built player protection frameworks, and have a proven track record of making lotteries better.

• Innovation - We pride ourselves on it! We’re constantly looking for new ways to excite our customers, bringing new products to enjoy which is all underpinned by our responsible play values and making them accessible to all.
• Giving back – Did you know that playing the lottery generates around £30m a week for charities and good causes in the UK? Our aim is to have doubled this number by the end of the first 10 year licence
• Sustainability – Our aim to be net zero by 2030 which would make us the first lottery provider globally to achieve this
• Inclusion and accessibility – We are making all parts of The National Lottery inclusive – whether you play a game in a store or online.

If you need any assistance or adjustments to this job description or in the application process, please contact a member of the talent team at [e-mail] and we’ll be happy to help.

Being the custodians of the National Lottery license is a big responsibility, so all of our roles are subject to extensive background checks

An inclusive reward offering with wellbeing at the centre…

At Allwyn, we’ve put together a range of inclusive benefits and policies to support our colleagues at every stage of their lives and careers.

Here’s a list of some of the fantastic benefits we offer…

• Company bonus scheme
• Matched pension contributions up to 8.5%
• 26 days annual leave + 2 Life Days (and bank holidays)
• Complimentary Private Medical
• Life Assurance
• Enhanced Maternity & Paternity leave
• £500 wellness allowance
• Access to nutritional advisor and personal trainers
• Discounted Health Assessments
• Complimentary Financial coaching

Our benefits and policies reflect our commitment to wellbeing and inclusivity and are enhanced with features that benefit our colleagues (and their families). By offering a variety of benefits that support our colleagues, we continue to create a place of work where people feel rewarded and can succeed.

A place of belonging…

We want to create one of the UK’s most inclusive organisations – where people can bring the best of themselves, to do their best work, every day, for the benefit of good causes.

Allwyn is an Equal Opportunity Employer which prides itself in being diverse and inclusive. We do not tolerate discrimination, harassment, or victimisation in the workplace. All employment decisions at Allwyn are based on the business needs, the job requirements, and the individual qualifications. Allwyn encourages applications from individuals regardless of age, disability (visible or hidden), sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships.

We are a Disability Confident Leader which means we’ve taken proactive steps to ensure our workplace is accessible and inclusive for disabled colleagues and candidates. As part of this we offer an interview to disabled applicants who meet the essential requirements of the job.