Allwyn UK

DevOps Engineer

• Monitor, triage and remediate vulnerabilities across applications, cloud workloads, containers, CI/CD pipelines and IaC repositories
• Work closely with SOC, Enterprise Security and Cyber Defence teams to respond to active and emerging threats and deliver rapid technical remediation
• Integrate security tooling into CI/CD pipelines, including container scanning and secret scanning
• Maintain and improve IaC security posture using Terraform and ensure compliance with security baselines and guardrails
• Automate security checks and enforcement using policy as code, security scanners and cloud-native services
• Support threat modelling and secure solution design with engineering teams
• Own vulnerability management workflows and ensure timely remediation in line with risk and audit expectations
• Implement and maintain cloud security configurations, including IAM, key management, WAF, security groups, logging and monitoring
• Produce technical documentation, runbooks and remediation guidance for engineering teams
• Work with product and engineering teams to embed security into development standards
• Create and enforce governance policies
• Reduce critical and high-risk vulnerabilities within agreed SLAs
• Improve security posture through cloud security benchmarks, IaC scanning and automated policy compliance
• Increase automation coverage and reduce manual remediation effort
• Ensure secure pipelines through scanning-tool adoption and prevention of high or critical findings reaching production
• Meet audit and compliance targets with no major DevOps or cloud-security findings

DevSecOps Engineer

Accountant

• Support delivery of Trust reporting, financial control, funds protection and assurance activities
• Prepare and review Trust accounting, journals and balance sheet reconciliations
• Deliver assigned regulatory reporting to the Trustee and Gambling Commission
• Contribute to the Trust Position Statement and supporting schedules
• Ensure reporting outputs have appropriate documentation, evidence and controls
• Investigate and resolve reporting issues, reconciliations and exceptions
• Lead assigned elements of Funds Protection Policies and associated control framework
• Deliver assurance and attestation activities supported by reliable evidence
• Monitor control effectiveness and identify improvement opportunities
• Support investigation and resolution of funds protection, reporting and control issues
• Maintain documentation supporting Trust and regulatory compliance
• Support governance of the Security Trust Deed
• Coordinate assigned internal and external audit activity
• Prepare papers, updates and evidence-based reporting for governance forums
• Maintain oversight of assigned risks, issues and actions
• Build relationships across Finance, Legal and Regulation and with external assurance stakeholders
• Improve reporting processes, controls and ways of working
• Support automation and system-based controls
• Develop management information and insight for decision-making and visibility of risks, issues and performance
• Collaborate across Trust & Finance Gaming Systems and share knowledge across reporting, assurance, governance and funds protection

Senior Trust Reporting Accountant

Security Engineer

• Provide security architecture support to mobile and web application initiatives from discovery and design through build, testing, release and operation
• Partner with solution architects, software engineers, product teams, delivery leads and third parties to embed security early while considering pace, cost, usability and quality
• Produce and maintain high-level and detailed security designs, security requirements, architecture decisions, patterns and assurance evidence
• Lead application threat modelling using techniques such as STRIDE, documenting threats, attack paths, trust boundaries, mitigations and residual risks
• Assess web applications, native and cross-platform mobile applications, APIs, microservices, identity flows, cloud services and third-party integrations
• Define security requirements for authentication, authorisation, session management, secrets, cryptography, data protection, API security, logging, monitoring, resilience and secure configuration
• Apply OWASP Top 10, OWASP ASVS, OWASP MASVS and secure-by-design principles
• Guide teams on secure mobile and web design
• Advise on application security testing strategy, including SAST, DAST, SCA, secrets scanning, API testing, mobile application testing, IAST and penetration testing
• Support integration of security controls and automated testing into CI/CD pipelines, including quality gates and exception routes
• Review security findings, challenge false positives, prioritise remediation and support pragmatic corrective actions
• Produce penetration test scopes and security test plans, coordinate testing and assess remediation
• Identify and communicate security risks, control gaps and non-compliance, supporting accountable owners in reaching informed risk positions
• Contribute to reusable security patterns, standards, guardrails and reference architectures
• Coach engineering and architecture communities on secure design, threat modelling and secure development practices

Security Architect

Executive

• Act as the face of Allwyn for new National Lottery retailers within the designated territory
• Build retailer advocacy and positive relationships with retail partners
• Plan and prioritise time for training, sales-driving visits, dormancy reduction, onboarding new stores and ownership changes
• Train and support new and experienced retailers across a wide geographical area
• Record retailer interactions throughout the Retailer Journey using customer records management platforms
• Support retailers in using the self-service retailer website after their first trading day
• Manage difficult conversations regarding finance and security issues
• Use data to prioritise new business opportunities and gain retailer commitment through commercial conversations
• Deliver training on The National Lottery and its value to retailer partners
• Drive the in-store standards programme, including compliance with 10-point standards, marketing-material placement and Scratchcard dispenser replenishment
• Sign eligible stores to the Retailer Hub
• Collaborate with Retail Sales teams through meetings and events
• Develop within the ambassador network and support departmental projects and accountabilities
• Maintain integrity and accuracy while supporting Responsible Retailing, Healthy Play and test purchase programmes

Retail Estate Executive

Communications

• Report to the Head of Corporate Communications & Campaigns
• Identify internal business moments and stories that build Allwyn’s reputation as a trusted operator of The National Lottery
• Identify primary channels to maximise communications impact
• Monitor external conversations about Allwyn UK and The National Lottery and advise on whether responses are needed
• Develop communications responses to issues and risks
• Build corporate communications campaigns covering the Employee Brand, retailer support, Social Value programmes, business milestones and performance
• Promote and protect the Allwyn and The National Lottery brands
• Identify and act on news opportunities based on strategic priorities and everyday activity
• Identify media and broader corporate risks and advise on mitigations
• Respond quickly to negative media enquiries
• Grow and maintain relationships with relevant media and journalists
• Share and comment on Allwyn news using a multiplatform, digital-first approach
• Source, create and edit written or broadcast news stories with communications colleagues and stakeholders
• Monitor journalist moves, industry trends and emerging news platforms
• Work with the communications agency partner as required
• Assist with team administration and planning, including subscriptions, suppliers, calendars, rotas, press cuttings and performance reports

DevSecOps Engineer

Senior Trust Reporting Accountant

Security Architect

Retail Estate Executive

Corporate Communications Manager