Senior Application Risk & Compliance Analyst

Aristocrat; Kraków; On-site; PLN 180,000 - 260,000; Full time

Job summary

Aristocrat in Kraków is seeking an experienced Application Risk Analyst to help safeguard its IT and product security posture. You will work within the Cyber Governance, Risk, and Compliance (GRC) team to assess risks, enforce controls, and support regulatory compliance across units.

You will collaborate with product teams, GIS, and internal auditors, mentor colleagues on evolving regulatory landscapes, and contribute to the ongoing enhancement of Aristocrat’s security policies and standards.

Qualifications

• 5+ years of information security experience with a relevant degree.
• IT Audit or cyber advisory experience is a plus.
• Familiarity with NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Responsibilities

• Conduct technical application and third-party risk assessments to identify cyber vulnerabilities and regulatory threats.
• Collaborate with agile Product teams and GIS to implement mitigating technical controls aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for Business Unit owners, highlighting key risks and policy exceptions through threat modeling.
• Partner with GIS and Business Units to develop and implement risk exception plans and strategies.
• Support the development of automated quantitative and qualitative risk analyses and reporting processes.
• Liaise with internal and external auditors to provide documentation and evidence for compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Provide mentorship on changes in product security and regulatory landscapes, updating Aristocrat’s Security Policies, Standards, and Technical Security Requirements as needed.
• Support the delivery of the wider GIS Security program in line with Aristocrat’s strategy and important metrics.

Skills

Analytical thinking

Communication skills

Collaborative skills

Cybersecurity knowledge

Regulatory standards

Education

Information security degree

Job description

Aristocrat in Kraków is seeking an experienced Application Risk Analyst to help safeguard its IT and product security posture. You will work within the Cyber Governance, Risk, and Compliance (GRC) team to assess risks, enforce controls, and support regulatory compliance across units.

You will collaborate with product teams, GIS, and internal auditors, mentor colleagues on evolving regulatory landscapes, and contribute to the ongoing enhancement of Aristocrat’s security policies and standards.