Senior Technical Compliance & Audit Lead — Equity

DraftKings Inc.; Boston (MA); On-site; USD 111,000 - 139,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Boston HQ

Job summary

DraftKings Inc., a publicly traded technology company headquartered in Boston, seeks a Senior Technical Compliance Analyst to strengthen technical compliance programs and support audits across SOC 2, ISO 27001, PCI DSS, SOX ITGC, and NIST. You’ll translate regulatory requirements into practical controls and scalable processes for engineering and business teams.

You’ll partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to address gaps, improve tooling,

Qualifications

• Bachelor’s degree in computer science, information technology, or related field.
• 5+ years in technical compliance, IT audit, security or privacy compliance.
• Experience with SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST or similar standards.
• Experience leading audit readiness, evidence collection, remediation tracking.
• Ability translate regulatory requirements into technical controls and workflows.

Responsibilities

• Own technical compliance domains across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST.
• Lead audit and certification activities from planning through completion with cross-team coordination.
• Partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to address gaps.
• Translate regulatory and certification requirements into practical controls and workflows.
• Develop program health metrics, audit status reporting, and leadership-ready insights.

Skills

SOC 2

ISO 27001

PCI DSS

NIST

Audit readiness

Control testing

Python scripting

Stakeholder comms

Cloud security

Education

Bachelor's degree in CS/IT

Certs (CISA/CISSP/CRISC/CISM)

Tools

GRC software

Job description

DraftKings Inc., a publicly traded technology company headquartered in Boston, seeks a Senior Technical Compliance Analyst to strengthen technical compliance programs and support audits across SOC 2, ISO 27001, PCI DSS, SOX ITGC, and NIST. You’ll translate regulatory requirements into practical controls and scalable processes for engineering and business teams.

You’ll partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to address gaps, improve tooling,