Senior GRC & Application Risk Analyst

Aristocrat Technologies, Inc.; Poland; On-site; PLN 110,000 - 190,000; Full time

Benefits offered by this job

Robust benefits package

Global career opportunities

Job summary

Aristocrat Technologies, Inc. is seeking an Application Risk Analyst to support cybersecurity goals and regulatory compliance across all units.

You will conduct risk assessments of applications and third parties, collaborate with product teams to implement mitigating controls, and prepare detailed reports for Business Unit owners. Strong knowledge of standards (NIST CSF, ISO 27001, PCI DSS) and effective communication are essential.

Qualifications

• 5+ years of information security experience with a relevant degree.
• Familiarity with cybersecurity industry standards such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Responsibilities

• Conduct risk assessments of applications and third parties to identify cyber threats.
• Collaborate with product teams to implement mitigating controls aligned with GIS policies and standards.
• Prepare assessment reports for Business Unit owners highlighting risks and policy exceptions.
• Partner with GIS and Business Units to develop risk exception plans and strategies.
• Support automated quantitative and qualitative risk analyses and reporting processes.
• Coordinate with auditors to provide documentation for SOC 2, ISO 27001, PCI DSS, and NIST CSF 2.0.
• Mentor teams on product security and regulatory changes; update security policies and requirements.
• Support delivery of the GIS Security program in line with strategy and metrics.

Skills

Analytical thinking

Collaboration

Communication

Adaptability

Problem solving

Education

Relevant information security degree

Tools

NIST CSF

NIST 800-53

ISO 27001

PCI DSS

Job description

Aristocrat Technologies, Inc. is seeking an Application Risk Analyst to support cybersecurity goals and regulatory compliance across all units.

You will conduct risk assessments of applications and third parties, collaborate with product teams to implement mitigating controls, and prepare detailed reports for Business Unit owners. Strong knowledge of standards (NIST CSF, ISO 27001, PCI DSS) and effective communication are essential.