Security Architect

Security Architect

We are Flutter Central & Eastern Europe (CEE).

As a proud member of the Flutter family - a global leader in sports betting and iGaming - we are building one of the Group`s most dynamic tech and product hubs in Central and Eastern Europe. We aren`t just here to participate; we`re here to change the game.

By uniting local powerhouses like MaxBet, Adjarabet.com, and Adjarabet.am, we combine deep regional expertise with the scale and strength of Flutter`s global platforms. We are setting a new standard for entertainment, responsibility, and innovation — powered by real customer signals that shape everything we build.

READY TO CHANGE THE GAME?

Join the Flutter Central & Eastern Europe team. This is where bold, ambitious minds build scalable platforms, drive innovation, and shape the future of iGaming in the region.

Flutter CEE runs licensed betting and gaming brands (Adjarabet, Maxbet and future CEE markets) on a large multi-account AWS estate alongside on-premises infrastructure, across several regulated jurisdictions. We are hiring a Security Architect to own security architecture for CIO technology: infrastructure, networking, platforms and integrations, in the cloud and on-premises.

You will be the dedicated security expert in the CIO Architecture & Standards team, working alongside an established security engineering and operations function. Your job is to make them stronger: bring design capacity, turn operational knowledge into reusable standards and patterns, and carry the security design review so engineers can stay focused on engineering.

The Security Architect owns security architecture for CIO technology across Flutter CEE, cloud and on-premises. The role designs new security initiatives and major security changes, reviews every design submitted to the Technical Design Authority, continuously assesses and improves the security posture of the estate, and defines security standards and patterns. It works alongside the existing security engineering and operations teams, not above them.

• Design new security initiatives, deployments and major security-relevant changes end to end: options, trade-offs, target architecture, migration path and operational handover.
• Own the security review of every design that goes through our Technical Design Authority, within an agreed timebox and with a clear verdict.
• Build an evidence-based view of the security posture of the estate, keep finding gaps and blind spots, and drive the resulting improvement initiatives to completion.
• Define security architecture principles, standards, reference architectures and reusable patterns.
• Introduce a practical, lightweight threat-modelling method and make it routine.
• Take part early in material security decisions and record them as architecture decision records.
• Partner with security engineering and operations, infrastructure and operations teams, the AI Innovation Hub and CTO product architecture.

• Strong security architecture experience across cloud and on-premises estates, ideally including large multi-account AWS environments.
• Experience assessing the security posture of a real estate, ranking findings by risk and turning them into delivered improvements.
• Solid grounding in identity and access management, network security, encryption and key management, data protection and classification, and secure integration patterns.
• Hands-on threat-modelling experience and the ability to make it repeatable for other architects and engineers.
• Familiarity with security tooling estates (posture management, SIEM, endpoint protection, vulnerability management) at an architecture level.
• The ability to explain security risks, options and recommendations clearly to technical and non-technical audiences.
• The ability to drive initiatives across teams without direct authority over them.
• Experience in gaming, betting, fintech or other regulated, licensed, multi-jurisdiction environments, including data-residency requirements.
• Experience securing AI/LLM-based capabilities and applying AI within security workflows under proper governance.
• AWS-native security services and landing-zone security models.
• Defining reference architectures, standards and exception processes within an architecture governance model (TDA, Architecture Board or equivalent).
• Certifications such as CISSP, CCSP, SABSA or AWS Security Specialty are welcome; evidence of delivered outcomes matters more.

• Assess before prescribing: evidence first, opinion second.
• Prioritise by risk, not by ease.
• Secure by design from the start, not approval at the end.
• Standards must be practical, reusable and easy to apply.
• Alongside, not above: this role exists to make the security function stronger, never to supervise it.
• Own it end to end: a finding without a driven remediation is just a document.

Why choose us

At Flutter CEE, people have access to vast opportunities for career growth and self-development. Our employee benefits package goes far beyond offering the minimum: We support our people in becoming their best version at work and beyond - and our benefits reflect that commitment.

• Generous annual leave
• Hybrid work
• Individual health insurance
• Paid sick leave
• Paid maternity & paternity leave
• Family reward
• Performance & referral bonuses