The Leaflet

• Assist search marketing team to execute paid search strategy across web and mobile app ecosystems • Conduct advanced keyword research, competitive analysis, and audience targeting optimization • Manage campaign budgets, bids, and performance optimization to achieve target KPIs alongside Managers • Implement and test Custom Product Pages (CPPs) to maximize conversion rates • Analyze ASA performance data and provide actionable insights for continuous improvement • Build, launch, and optimize Google Ads search campaigns for web and mobile app objectives • Develop and execute Bing Ads search campaigns to complement Google search strategy • Design and manage App Campaigns for app install and optimize to in-app performance goals • Implement advanced bidding strategies and creative optimization • Optimize campaigns based on Acquisition Goals and company KPIs • Launch integrated paid search campaigns across web and mobile app funnels • Monitor mobile attribution and in-app events through AppsFlyer • Execute regular A/B testing of ad copy, landing pages, CPPS (Custom Product Pages) and bidding strategies • Provide regular performance reports with actionable insights and recommendations

• Own cloud security posture and runtime protection across AWS, Azure, and GCP using Wiz and modern runtime protection tooling — from finding misconfigurations to driving them to closure and catching threats at runtime. • Define and maintain secure configuration baselines and guardrails so new cloud resources are safe by default • Partner with SecOps to feed high-quality cloud signals into our detection and response pipeline • Design and implement network segmentation and east-west controls that limit blast radius across our environments • Advance Zero Trust network access using Cloudflare Access, private connectivity, and service-to-service authentication (including mTLS where it fits) • Align our network posture to NIST SP 800-207 and the CISA Zero Trust Maturity Model (Networks pillar) • Own the security configuration of our Cloudflare edge — WAF, Bot Management, and DDoS protections — plus our broader Cloudflare Zero Trust deployment • Build policy-as-code and Terraform guardrails, and embed infrastructure-as-code security scanning (Wiz Code) into CI/CD pipelines — you own the infrastructure-scanning side of the pipeline • Act as the design authority for cloud, network, and edge security — setting standards, mentoring security and platform engineers, and driving alignment across teams you don't manage.

• Support the planning, execution, and coordination of VIP marketing campaigns, promotions, events, and operational initiatives. • Assist the VIP Marketing Projects Manager with project planning, timelines, deliverables, and cross-functional communication. • Track project milestones and provide regular status updates to leadership. • Prepare project documentation, reports, presentations, and Standard Operating Procedures (SOPs). • Coordinate operational logistics for VIP marketing initiatives and departmental projects. • Identify opportunities to improve operational workflows and recommend process enhancements. • Manage and maintain VIP operational data across Salesforce, Blackthorn, and Spoke Phone, ensuring data integrity and consistency. • Build, launch, and manage Salesforce campaigns supporting VIP communications, promotions, events, and marketing initiatives. • Conduct routine audits of CRM data to identify inconsistencies and maintain data quality. • Troubleshoot Salesforce-related issues, submit IT support tickets, and monitor resolution through completion. • Support system testing and implementation of new CRM functionality and operational enhancements. • Maintain documentation of CRM processes, workflows, and system updates. • Reconcile daily and monthly property comp reports, identifying discrepancies and communicating findings to Finance and Revenue teams. • Maintain accurate budget tracking reports and dashboards for leadership. • Assist with invoice tracking and reconciliation to ensure timely processing. • Partner with Finance to communicate budget variances and support forecasting efforts. • Track departmental budgets against forecasts, including event expenses, ticket allocations and ticket blocks, vendor invoices, one-off ticket requests, marketing, and operational expenditures. • Maintain and troubleshoot Slack workflows supporting VIP operations and internal communications. • Manage and maintain Zapier integrations and automated Slack notifications. • Update and maintain host contact tables that support Slack workflows and automated alerts. • Partner with Loyalty Operations to ensure shared contact tables remain accurate and operational. • Monitor workflow performance and proactively identify opportunities for automation and operational improvements. • Coordinate onboarding activities for new VIP team members under the direction of department leadership. • Support continuous improvements to the department's onboarding and intake process. • Assign learning paths and required training through Udemy Business or other Learning Management Systems. • Monitor training completion and distribute recurring compliance reports. • Partner with Learning & Development to maintain current training content and documentation. • Maintain onboarding guides, departmental documentation, and operational resources. • Support department reporting, audits, and operational initiatives. • Coordinate communication between stakeholders to ensure projects remain on schedule. • Assist leadership with special projects and operational initiatives as assigned. • Serve as a liaison between VIP Marketing and internal departments, including: Finance, Revenue Management, Loyalty, Information Technology, Learning & Development, Marketing.

• Assist in monitoring and managing the creation, maintenance, and quality assurance of event and market content across all relevant platforms. • Conduct competitor analysis to identify market trends, pricing strategies, and product gaps, delivering actionable insights to improve our offerings. • Support the implementation of processes and tools to improve operational workflows, ensuring accuracy and efficiency in content delivery. • Regularly review state-specific regulatory requirements, ensuring that all content aligns with compliance standards. • Collaborate with the trading team to add or remove content based on trading strategy and regulatory changes. • Monitor and report on key performance indicators (KPIs) related to content accuracy, compliance, and market competitiveness, providing recommendations for improvement. • Assist in investigating and resolving operational incidents, ensuring learnings are applied to prevent future occurrences. • Work closely with compliance and legal teams to support content-related activities during market expansion or regulatory updates.

• Secure SDLC & DevSecOps • Embed automated checks across our cloud (GitHub Actions) and on-prem product pipelines — GitHub Advanced Security (SAST/SCA) and Wiz Code for application, dependency, and container scanning • Define secure-by-default patterns, paved-road guardrails, and standards for secure coding, code review, and dependency hygiene — so teams ship quickly and safely • Serve as the application authority for our Zero Trust program, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model (Applications & Workloads pillar) • Threat Modeling & Secure Design • Partner with product and engineering on security reviews for new features and payment integrations — running threat modeling (e.g., STRIDE) early in design and turning output into concrete, prioritized work • Vulnerability Management (End to End) • Own the product and application vulnerability lifecycle — one program spanning code, dependency, container, pen-test, and bug-bounty findings, from discovery through remediation • Prioritize by real-world risk and drive remediation against risk-based SLAs; engineering owns the fixes, you own the program and the escalation paths that shrink time to remediate • Report program health with metrics leadership can act on, and provide evidence for compliance obligations (PCI DSS, GLI, ISO 27001, SOC 2) • Application & API Security • Defend our applications and APIs against the OWASP Top 10 and API abuse, partner on payment security across our payment gateways, and team with our Principal Cloud & Network Security Engineer — who owns our Cloudflare edge defenses (WAF, Bot Management) — on bot and abuse resilience • Own the application security of player-facing account flows — registration, authentication, session management, recovery — partnering with our Principal Identity Engineer on CIAM architecture and with SecOps and Fraud on account-takeover resilience • Testing & External Assurance • Coordinate penetration testing with external partners and drive findings to closure • Mature our existing coordinated-disclosure program into a full bug-bounty capability

• Support the coordination team’s operating rhythm, helping ensure tasks, hand-offs, and communications are completed accurately and on time. • Proactively identify process gaps, bottlenecks, and recurring issues by recommending and implementing practical improvements. • Support the execution of established coordination processes across the Sportsbook, helping ensure they are followed consistently and escalating gaps and concerns to the Senior Manager. • Align with trading, product, and the wider Sportsbook to ensure new sports, feeds, and markets are sequenced, tracked, and activated without gaps. • Partner with the Sportsbook leadership on the preparation and coordination of key leadership events, ensuring senior stakeholders are briefed, materials are ready, and logistics are managed end-to-end. • Execute and track the Senior Manager’s priorities into clear daily and weekly coordination team objectives, tracking progress and flagging risks early. • Maintain and improve process documentation, trackers, and templates in order for the team to operate cohesively. • Own the monthly Coordination team report and produce ad hoc reporting for leadership, synthesizing the team's activity, operational findings, and risk insights into clear, concise outputs.

• Daily Monitoring & Assessment • Execute comprehensive daily QA checklists • Test user experience flows • Increase surveillance during major sporting events • Verify implementation of the Planning team’s content strategies • Produce detailed daily QA reports • Escalate critical issues to the appropriate teams

• Own the security architecture, standards, authentication methods, and roadmap for Microsoft Entra ID, our primary identity provider — partnering with IT on tenant operations • Design and continuously refine Conditional Access policies that balance strong protection with a smooth experience for a globally distributed workforce • Advance our rollout of phishing-resistant, passwordless authentication (passkeys, certificate-based, FIDO2) • Own federation and single sign-on across our SaaS estate (SAML, OIDC, OAuth 2.0, SCIM provisioning) • Own our privileged access model using Microsoft Entra PIM — separate admin identities, just-in-time elevation, and approval workflows • Design and maintain break-glass procedures and safeguards for our most sensitive administrative paths • Reduce standing privilege across the environment and make "least privilege, just in time" the default • Automate the joiner-mover-leaver lifecycle so access is granted, changed, and revoked accurately and promptly • Build and run access reviews and entitlement governance, partnering with our GRC team on audit evidence (ISO 27001, SOC 2, PCI DSS, GLI-19/GLI-33) • Make access decisions auditable, explainable, and continuously right-sized • Govern service principles, managed identities, and workload/federated credentials across AWS, Azure, and GCP • Partner on secrets governance across our secrets management platforms to shrink the number of long-lived, standing secrets • Partner with our Principal Cloud & Network Security Engineer, who owns service-to-service authentication (mTLS, service mesh) • Serve as the identity authority for our Zero Trust program, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model (Identity pillar) • Partner with our cloud and network security function on identity-aware access through Cloudflare Access • Partner with Security Operations to make identity signals (risky sign-ins, privileged elevation, MFA anomalies) first-class inputs to detection and response • Advise on customer identity (CIAM) and account-security architecture — partnering with our Principal Product Security Engineer, who owns the application security of player-facing account flows, and with product engineering

• Work closely with CRM Customer Value team to align promotional and messaging pillars • Adhere to consistent process-first QA guidelines to ensure best-in-class customer experience for all Customer Value-led content • Ensure all promotional materials meet compliance and brand standards • Communicate how campaign mechanics, targeting strategy, offer structures and messaging adhere to broader Sportsbook Promotions team goals • Analyze performance trends to optimize against key objectives

• Responsible for processing International and U.S. New Hires. • Terminations and LOA’s • Ensure compliance and data integrity of payroll data in all systems • Ensures and maintains compliance with applicable payroll legislation. • Executes time and attendance set up for first day of employment. • Deliver superior customer service to both staff and external vendors, escalating benefits and payroll issues where required. • Validate Record of Employment submissions. • Additional duties and special projects, as assigned. • Support with administering & communicating reward and benefit programs.