Cyber Risk & Assessment Specialist

Aristocrat Gaming; Kraków; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Aristocrat Gaming is seeking a Cyber Specialist to lead security assessments across web, mobile, APIs, and cloud platforms. You will translate findings into risk-based recommendations and communicate with both technical and non-technical stakeholders.

The role is hybrid and based in Krakow, requiring in-office presence three days per week. You will work with Procurement, Legal, and business teams to resolve security concerns and support audits, while maintaining awareness of global security

Qualifications

• Bachelor's degree in Cybersecurity or related field, or equivalent experience.
• 5+ years of experience in cybersecurity, IT risk, IT audit, compliance, third-party risk management, security assessments, or related field.
• Proven experience conducting independent security assessments and detailing risk-based findings.
• Experience reviewing architecture and infrastructure security controls, vendor documentation, SOC reports, audit artifacts, remediation plans, and compliance evidence.
• Certifications such as CISSP, CISA, CRISC, GIAC (or equivalents) are strongly preferred.

Responsibilities

• Perform technical security assessments of web apps, mobile apps, APIs, applications, systems, cloud services, and other platforms.
• Evaluate security controls (authentication, authorization, session management, encryption, logging, etc.) to detect risks and gaps.
• Develop practical, risk-based recommendations balancing security with operational needs.
• Document findings and risk decisions clearly and professionally.
• Review evidence supporting controls and evaluate control efficiency.
• Produce executive-ready assessment summaries, threat analyses, and remediation recommendations.
• Present findings to technical and non-technical audiences.
• Support reporting on assessment activity, risks, remediation, and security trends.
• Review vendor security questionnaires, SOC reports, certifications, penetration testing reports, and supporting security documentation.
• Evaluate security measures of vendors, SaaS, cloud providers, and technology partners.
• Collaborate with Procurement, Legal, and business teams to resolve security concerns and residual risk.
• Assist with internal/external audits and client assurance requests.
• Maintain awareness of ISO 27001, NIST CSF, NIST 800-53, CIS Controls, PCI DSS, NIS2, OWASP, GLI and applicable regulatory requirements.
• Contribute to ongoing improvement of security assessment processes, templates, standards, and reporting.

Skills

Cybersecurity

IT risk management

Security assessments

Vendor risk

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

SOC reports

GRC tools

Evidence management

Job description

Aristocrat Gaming is seeking a Cyber Specialist to lead security assessments across web, mobile, APIs, and cloud platforms. You will translate findings into risk-based recommendations and communicate with both technical and non-technical stakeholders.

The role is hybrid and based in Krakow, requiring in-office presence three days per week. You will work with Procurement, Legal, and business teams to resolve security concerns and support audits, while maintaining awareness of global security