Aristocrat

Cybersecurity Risk Analyst

174.8k - 222.7k PLN174 848 - 222 732 PLN/ rok./ rok.

SeniorOn-site·KrakówFull-time

#438143·Dodano miesiąc temu·0

Źródło: justjoin.it

⚠️Uwaga: ta oferta może już nie być aktualna. Sprawdź na stronie pracodawcy, czy rekrutacja jest nadal otwarta.

Aplikuj teraz

Tech Stack / Keywords

Analiza ryzyka aplikacjiZarządzanie ryzykiem dostawcówModelowanie zagrożeńAutomatyzacja analiz ryzykaAudyt ITISO 27001PCI DSSNIST CSFNIST 800-53SOC-2

Podsumowanie oferty

The Cybersecurity Risk Analyst role is part of the Governance, Risk, and Compliance (GRC) Cybersecurity team at Aristocrat. The position focuses on conducting application and third-party risk assessments, collaborating with Agile product teams, and supporting compliance with security standards. The role involves technical risk evaluation to ensure secure and resilient IT infrastructure.

Wymagania

Self-motivation and adaptability in a constantly changing cybersecurity environment.
Excellent collaboration skills and willingness to work as part of a cohesive, distributed team.
Strong analytical and critical thinking skills.
Comprehensive communication skills including effective listening, data gathering, and articulation of ideas.
Over 5 years of experience in information security with relevant education.
Experience in IT audit, internal audit, or cybersecurity consulting is desirable.
Knowledge of cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

Obowiązki

Conduct technical risk assessments of applications and external vendors to identify cyber, operational, and regulatory risks.
Collaborate with Agile product teams and GIS to implement technical mitigations aligned with GIS policies and regulatory standards.
Prepare detailed assessment reports for business unit owners highlighting key risks and policy exceptions through threat modeling.
Work with GIS and business units to develop and implement risk exception plans and strategies.
Support development of automated quantitative and qualitative risk analysis and reporting processes.
Maintain communication with internal and external auditors to provide documentation and evidence of compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
Assist with product security changes and regulatory landscape updates, updating Aristocrat Security Policies, Standards, and Technical Security Requirements as needed.
Support execution of the broad GIS security program per Aristocrat strategy and key metrics.

Benefity

Comprehensive compensation and benefits package designed to remain competitive and support employee well-being.
Reward based on performance, individual impact, and achievements.
Eligibility for annual bonuses, health and wellness benefits, paid time off, retirement programs, insurance coverage, and other statutory or local benefits depending on the role and location.

Premie

Opieka zdrowotna

Płatny urlop

Ubezpieczenie

Inne informacje

Depending on the role, registration with the Nevada Gaming Control Board (NGCB) and/or other gaming jurisdictions where Aristocrat operates may be required.

Data controller is Aristocrat Poland. Personal data are processed for recruitment purposes based on labor law, consent, and legitimate interest. Data retention up to 24 months for future recruitment consent. Rights include data access, correction, deletion, restriction, objection, and complaint to UODO. Consent can be withdrawn at any time without affecting prior processing.

Aristocrat

39 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz