Hybrid Enterprise IAM IT Controls & Assurance Engineer – Flutter Functions

at Betfair Romania Development

• Job title: Enterprise IAM IT Controls & Assurance Engineer – Flutter Functions
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Cluj Napoca, Romania

About the role

• IAM IT Controls and Assurance Engineer at Flutter managing ITGCs for enterprise platforms. Bridging tech teams and audit stakeholders while ensuring SOX compliance.

Responsibilities

• Own and support IT General Controls (ITGCs) relevant to Enterprise IT platforms (e.g. access management, change management, logging, monitoring).
• Partner with SOX, Internal Audit, and external auditors to support walkthroughs, testing, and evidence requests.
• Ensure controls are designed, documented, and operating effectively, with clear ownership and audit trails.
• Identify control gaps and drive remediation actions with engineering teams.
• Support risk assessments, control rationalisation, and scoping discussions.
• Act as a controls-focused technical partner for platforms including:
• o SailPoint (identity lifecycle, access reviews, provisioning/de-provisioning)
• o Okta (authentication, SSO, MFA, privileged access considerations)
• o Jira (change management workflows, approvals, evidence retention)
• Work closely with engineers and admins to ensure secure and compliant configuration.
• Understand system capabilities and limitations and help design pragmatic, auditable solutions.
• Maintain clear, audit-ready documentation (procedures, control descriptions, evidence packs).
• Ensure changes to processes or configurations are appropriately reviewed, approved, and logged.
• Contribute to standardisation of controls and ways of working across Enterprise IT.
• Act as a trusted point of contact between Engineering, Risk, Compliance, and Audit.
• Translate audit requirements into practical engineering actions.
• Communicate clearly and confidently with both technical and non-technical stakeholders.

Requirements

• Stakeholder Management: Ability to act as a trusted liaison between Engineering, Risk, Compliance, and Audit teams, translating technical concepts for non-technical audiences and audit requirements into practical engineering actions.
• Technical Credibility: Hands-on understanding of enterprise IT platforms (SailPoint, Okta, Jira) and ability to engage confidently with engineers on system behaviour, configuration, and security.
• Controls & Compliance Expertise: Strong knowledge of SOX, ITGCs, and audit frameworks with ability to design, document, and operate controls that are defensible during internal and external audits.
• Problem Solving: Pragmatic approach to identifying control gaps, balancing compliance with operational reality, and driving remediation actions with engineering teams.
• Attention to Detail: Precision in maintaining audit-ready documentation, evidence management, control descriptions, and ensuring appropriate review, approval, and logging of all changes.
• Communication & Influence: Confident communicator capable of challenging and influencing constructively across technical and non-technical stakeholders in high-scrutiny, regulated environments.
• Experience working with SOX, ITGCs, or technology audits (internal or external).
• Solid understanding of access management and change management controls.
• Hands-on experience working with or supporting enterprise IT platforms.
• Ability to interpret audit requirements and apply them pragmatically in a technical environment.
• Strong documentation and evidence management skills.
• Confident communicator with the ability to challenge and influence constructively.
• Experience with SailPoint, Okta, Jira, or similar enterprise tooling.
• Background in IT audit, risk, compliance, or controls, with a transition into or alongside engineering.
• Familiarity with frameworks such as SOX, COSO, COBIT, or NIST.
• Experience supporting external auditors in a regulated environment.

Benefits

• Hybrid & remote working options
• €1,000 per year for self-development
• Company share scheme
• 25 days of annual leave per year
• 20 days per year to work abroad
• 5 personal days/year
• Flexible benefits: travel, sports, hobbies
• Extended health, dental and travel insurances
• Customised well-being programmes
• Career growth sessions
• Thousands of online courses through Udemy
• A variety of engaging office events