Application Cyber Risk & Compliance Analyst

GamblingCareers.com; Kraków; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Robust benefits package

Global career opportunities

Job summary

Aristocrat is a world leader in gaming content and technology. We are seeking an Application Risk Analyst within our Cyber Governance, Risk, and Compliance (GRC) team to help meet cybersecurity goals and ensure regulatory compliance across units.

You will conduct technical risk assessments, collaborate with agile product teams, prepare assessment reports, develop risk exception plans, and support automated risk analyses.

Qualifications

• 5+ years of experience in information security with a relevant degree.
• IT Audit, Internal Audit, and/or cyber advisory experience is a plus.
• Familiarity with cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Responsibilities

• Conduct technical application and third-party risk assessments to identify cyber vulnerabilities and regulatory threats.
• Collaborate with agile Product teams and GIS to implement mitigating technical controls aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for Business Unit owners, highlighting risks and policy exceptions through threat modeling.
• Partner with GIS and Business Units to develop and implement risk exception plans and strategies.
• Support the development of automated quantitative and qualitative risk analyses and reporting processes.
• Liaise with auditors to provide documentation for SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0 compliance.

Skills

Information security

Cybersecurity

Analytical thinking

Communication

Collaboration

Education

Relevant degree

Tools

NIST CSF

NIST 800-53

ISO 27001

PCI DSS

Job description

Aristocrat is a world leader in gaming content and technology. We are seeking an Application Risk Analyst within our Cyber Governance, Risk, and Compliance (GRC) team to help meet cybersecurity goals and ensure regulatory compliance across units.

You will conduct technical risk assessments, collaborate with agile product teams, prepare assessment reports, develop risk exception plans, and support automated risk analyses.