Cybersecurity Risk Analyst

Aristocrat is a global leader in gaming content and technology, operating three business units including regulated land-based gaming (Aristocrat Gaming), social casinos (Product Madness), and regulated real-money online gaming (Aristocrat Interactive). The company employs over 7300 people worldwide and focuses on delivering entertainment in the gaming industry.

• Self-motivated and adaptable to the constantly changing cybersecurity environment.
• Excellent collaboration skills and willingness to work as part of a cohesive, distributed team.
• Strong analytical and critical thinking skills.
• Comprehensive communication skills, including effective listening, data gathering, and articulation of ideas.
• Over 5 years of experience in information security with relevant education.
• Experience in IT audit, internal audit, and/or cybersecurity consulting is welcomed.
• Knowledge of cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications include CISSP, CCSP, CISM, CISA, CompTIA Security+, and GIAC.

• Conduct technical risk assessments of applications and external vendors to identify cyber threats, operational, and regulatory risks.
• Collaborate with Agile product teams and GIS to implement technical mitigations compliant with GIS policies and regulatory standards.
• Prepare detailed assessment reports for business unit owners, highlighting key risks and policy exceptions using threat modeling.
• Work with GIS and business units to develop and implement risk exception plans and strategies.
• Support development of automated quantitative and qualitative risk analyses and reporting processes.
• Maintain communication with internal and external auditors to provide documentation and evidence of compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Assist with product security changes and regulatory landscape updates by updating Security Policies, Standards, and Technical Requirements as needed.
• Support execution of the broad GIS security program aligned with Aristocrat strategy and key metrics.

Depending on the role, registration with the Nevada Gaming Control Board (NGCB) and/or other gaming jurisdictions may be required.

Data processing is conducted according to applicable legal regulations, including GDPR, with rights to data access, correction, deletion, limitation, transfer, objection, complaint, and withdrawal of consent as described.