GRC - Application Risk Analyst

Aristocrat; Kraków; On-site; PLN 120,000 - 150,000; Full time

Benefits offered by this job

Robust benefits package

Global career opportunities

Job summary

Aristocrat in Kraków is seeking an Application Risk Analyst for their Cyber Governance team. This role involves conducting application risk assessments, collaborating with agile teams, and ensuring compliance with security standards. The ideal candidate will have over 5 years of information security experience, a relevant degree, and familiarity with standards like NIST and ISO. Aristocrat fosters an inclusive environment focused on innovation and excellence.

The position does not require travel and offers a robust benefits package along with global career opportunities.

Qualifications

• 5+ years of experience in information security required.
• Familiarity with cybersecurity standards like NIST CSF, ISO 27001.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Responsibilities

• Conduct risk assessments to identify cyber vulnerabilities.
• Prepare assessment reports for business unit owners.
• Support compliance with international security standards.

Skills

Collaboration skills

Analytical thinking

Communication skills

Adaptability

Education

Relevant degree in information security

Job description

At Aristocrat, we believe in bringing happiness to life through the power of play. We are a world leader in gaming content and technology. We are committed to crafting a vibrant and inclusive environment where innovation thrives. Our culture focuses on collaboration, excellence, and positively impacting the gaming industry. The Application Risk Analyst role in our Cyber Governance, Risk, and Compliance (GRC) team is key to meeting cybersecurity goals and ensuring regulatory compliance across all units. This is an outstanding opportunity to join a dynamic team and help maintain a secure and resilient IT infrastructure!

What You'll Do

• Conduct technical application and third-party risk assessments to identify cyber vulnerabilities and operational and regulatory threats.
• Collaborate with agile Product teams and GIS to implement mitigating technical controls aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for Business Unit owners, highlighting key risks and policy exceptions through threat modeling.
• Partner with GIS and Business Units to develop and implement risk exception plans and strategies.
• Support the development of automated quantitative and qualitative risk analyses and reporting processes.
• Liaise with internal and external auditors to provide documentation and evidence for compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Provide mentorship on changes in product security and regulatory landscapes, updating Aristocrat’s Security Policies, Standards, and Technical Security Requirements as needed.
• Support the delivery of the wider GIS Security program in line with Aristocrat’s strategy and important metrics.

What We're Looking For

• Self-motivated and adaptable to an ever-changing cybersecurity environment.
• Excellent collaboration skills, eager to work as part of a cohesive, distributed team.
• Outstanding analytical and critical thinking skills.
• Comprehensive communication skills, including effective listening, data gathering, and idea articulation.
• 5+ years of experience in information security with a relevant degree.
• IT Audit, Internal Audit, and/or cyber advisory experience are a plus.
• Familiarity with cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Why Aristocrat?

Aristocrat is a world leader in gaming content and technology, and a top-tier publisher of free-to-play mobile games. We deliver great performance for our B2B customers and bring joy to the lives of the millions of people who love to play our casino and mobile games. And while we focus on fun, we never forget our responsibilities. We strive to lead the way in responsible gameplay, and to lift the bar in company governance, employee wellbeing and sustainability. We’re a diverse business united by shared values and an inspiring mission to bring joy to life through the power of play.

We aim to create an environment where individual differences are valued, and all employees have the opportunity to realize their potential. We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V

• World Leader in Gaming Entertainment
• Robust benefits package
• Global career opportunities

Our Values

• All about the Player
• Talent Unleashed
• Collective Brilliance
• Good Business Good Citizen

Travel Expectations
None

Additional Information

At this time, we are unable to sponsor work visas for this position. Candidates must be authorized to work in the job posting location for this position on a full-time basis without the need for current or future visa sponsorship.