Senior Technology GRC & Controls Lead

FanDuel; United States; Hybrid; USD 138,000 - 173,000; Full time

Benefits offered by this job

FanDuel Total Rewards

Job summary

FanDuel is seeking a Senior Technology Governance, Risk & Compliance (GRC) Analyst to join its Technology GRC team. You will design and mature a unified controls framework and drive accountability for governance, risk, and regulatory obligations across the technology landscape.

You will lead lifecycle activities, collaborate with data owners and auditors, and develop policies and controls aligned with NIST CSF, SOC2, PCI, and SOX requirements—empowering a compliant, audit-ready organization.

Qualifications

• Bachelor's degree or equivalent in a technical field.
• 5+ years of technology and cybersecurity Governance, Risk, and Compliance (GRC).
• Experience across process discovery, control design, testing, and remediation tracking.
• Experience with technology risk assessments and risk registers.
• Understanding of IT platforms such as AWS, Okta, GitHub, Atlassian products.

Responsibilities

• Lead and mature a risk-based technology control program.
• Manage control lifecycle from discovery to remediation and testing.
• Develop executive reports on technology control health and risk posture.
• Coordinate with audits for SOC2, PCI, state regulatory exams and other assessments.
• Develop and maintain governance policies, standards, and procedures.

Skills

GRC Strategy

Regulatory Compliance

IT Risk Assessment

Audit Liaison

NIST CSF

SOC2/PCI/SOX

Cloud Platforms (AWS)

Stakeholder Communication

GRC Tools

Education

Bachelor's degree

Tools

Optro

Anecdotes

Jira

Sharepoint

Job description

FanDuel is seeking a Senior Technology Governance, Risk & Compliance (GRC) Analyst to join its Technology GRC team. You will design and mature a unified controls framework and drive accountability for governance, risk, and regulatory obligations across the technology landscape.

You will lead lifecycle activities, collaborate with data owners and auditors, and develop policies and controls aligned with NIST CSF, SOC2, PCI, and SOX requirements—empowering a compliant, audit-ready organization.