Cybersecurity Risk Analyst

Aristocrat is a global leader in gaming content and technology, operating three business units including regulated land-based gaming (Aristocrat Gaming), social casinos (Product Madness), and regulated real-money online gaming (Aristocrat Interactive). The company has over 7300 employees worldwide.

• Self-motivation and adaptability in a constantly changing cybersecurity environment.
• Excellent collaboration skills and willingness to work as part of a cohesive, distributed team.
• Strong analytical and critical thinking skills.
• Comprehensive communication skills including effective listening, data gathering, and articulation of ideas.
• Over 5 years of experience in information security with relevant education.
• Experience in IT audit, internal audit, or cybersecurity consulting is desirable.
• Knowledge of cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

• Conduct technical risk assessments of applications and external vendors to identify cyber, operational, and regulatory risks.
• Collaborate with Agile product teams and GIS to implement technical mitigations aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for business unit owners highlighting key risks and policy exceptions through threat modeling.
• Work with GIS and business units to develop and implement risk exception plans and strategies.
• Support development of automated quantitative and qualitative risk analysis and reporting processes.
• Maintain communication with internal and external auditors to provide documentation and evidence of compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Assist with product security changes and regulatory landscape updates, updating Aristocrat Security Policies, Standards, and Technical Security Requirements as needed.
• Support execution of the broad GIS security program per Aristocrat strategy and key metrics.

Depending on the role, registration with the Nevada Gaming Control Board (NGCB) and/or other gaming jurisdictions where Aristocrat operates may be required.

Data controller is Aristocrat Poland. Personal data are processed for recruitment purposes based on labor law, consent, and legitimate interest. Data retention up to 24 months for future recruitment consent. Rights include data access, correction, deletion, restriction, objection, and complaint to UODO. Consent can be withdrawn at any time without affecting prior processing.