GRC - Application Risk Analyst

Aristocrat Technologies, Inc.; Poland; On-site; PLN 110,000 - 190,000; Full time

Benefits offered by this job

Robust benefits package

Global career opportunities

Job summary

Aristocrat Technologies, Inc. is seeking an Application Risk Analyst to support cybersecurity goals and regulatory compliance across all units.

You will conduct risk assessments of applications and third parties, collaborate with product teams to implement mitigating controls, and prepare detailed reports for Business Unit owners. Strong knowledge of standards (NIST CSF, ISO 27001, PCI DSS) and effective communication are essential.

Qualifications

• 5+ years of information security experience with a relevant degree.
• Familiarity with cybersecurity industry standards such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Responsibilities

• Conduct risk assessments of applications and third parties to identify cyber threats.
• Collaborate with product teams to implement mitigating controls aligned with GIS policies and standards.
• Prepare assessment reports for Business Unit owners highlighting risks and policy exceptions.
• Partner with GIS and Business Units to develop risk exception plans and strategies.
• Support automated quantitative and qualitative risk analyses and reporting processes.
• Coordinate with auditors to provide documentation for SOC 2, ISO 27001, PCI DSS, and NIST CSF 2.0.
• Mentor teams on product security and regulatory changes; update security policies and requirements.
• Support delivery of the GIS Security program in line with strategy and metrics.

Skills

Analytical thinking

Collaboration

Communication

Adaptability

Problem solving

Education

Relevant information security degree

Tools

NIST CSF

NIST 800-53

ISO 27001

PCI DSS

Job description

A leading gaming technology company, we prioritize innovation and collaboration while ensuring secure infrastructure. The Application Risk Analyst in our Cyber Governance, Risk, and Compliance team supports cybersecurity goals and regulatory compliance across all units.

What You'll Do

• Conduct technical application and third‑party risk assessments to identify cyber vulnerabilities and operational and regulatory threats.
• Collaborate with agile Product teams and GIS to implement mitigating technical controls aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for Business Unit owners, highlighting key risks and policy exceptions through threat modeling.
• Partner with GIS and Business Units to develop and implement risk exception plans and strategies.
• Support the development of automated quantitative and qualitative risk analyses and reporting processes.
• Liaise with internal and external auditors to provide documentation and evidence for compliance with international security standards (SOC‑2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Provide mentorship on changes in product security and regulatory landscapes, updating security policies, standards, and technical requirements as needed.
• Support the delivery of the wider GIS Security program in line with overall strategy and key metrics.

What We're Looking For

• Self‑motivated and adaptable to an ever‑changing cybersecurity environment.
• Excellent collaboration skills, eager to work as part of a cohesive, distributed team.
• Outstanding analytical and critical thinking skills.
• Comprehensive communication skills, including effective listening, data gathering, and idea articulation.
• 5+ years of experience in information security with a relevant degree.
• IT Audit, Internal Audit, and/or cyber advisory experience are a plus.
• Familiarity with cybersecurity industry standards and frameworks such as NIST CSF, NIST 800‑53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Benefits

• Robust benefits package
• Global career opportunities

Travel Expectations

None

We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V

Additional Information

At this time, we are unable to sponsor work visas for this position. Candidates must be authorized to work in the job posting location for this position on a full‑time basis without the need for current or future visa sponsorship.