GRC - Application Risk Analyst

At Aristocrat, we believe in bringing happiness to life through the power of play. We are a world leader in gaming content and technology. We are committed to crafting a vibrant and inclusive environment where innovation thrives. Our culture focuses on collaboration, excellence, and positively impacting the gaming industry. The Application Risk Analyst role in our Cyber Governance, Risk, and Compliance (GRC) team is key to meeting cybersecurity goals and ensuring regulatory compliance across all units. This is an outstanding opportunity to join a dynamic team and help maintain a secure and resilient IT infrastructure!

What You'll Do

• Conduct technical application and third-party risk assessments to identify cyber vulnerabilities and operational and regulatory threats.
• Collaborate with agile Product teams and GIS to implement mitigating technical controls aligned with GIS policies and regulatory standards.
• Prepare detailed assessment reports for Business Unit owners, highlighting key risks and policy exceptions through threat modeling.
• Partner with GIS and Business Units to develop and implement risk exception plans and strategies.
• Support the development of automated quantitative and qualitative risk analyses and reporting processes.
• Liaise with internal and external auditors to provide documentation and evidence for compliance with international security standards (SOC-2, ISO 27001, PCI DSS, NIST CSF 2.0).
• Provide mentorship on changes in product security and regulatory landscapes, updating Aristocrat’s Security Policies, Standards, and Technical Security Requirements as needed.
• Support the delivery of the wider GIS Security program in line with Aristocrat’s strategy and important metrics.

What We're Looking For

• Self-motivated and adaptable to an ever-changing cybersecurity environment.
• Excellent collaboration skills, eager to work as part of a cohesive, distributed team.
• Outstanding analytical and critical thinking skills.
• Comprehensive communication skills, including effective listening, data gathering, and idea articulation.
• 5+ years of experience in information security with a relevant degree.
• IT Audit, Internal Audit, and/or cyber advisory experience are a plus.
• Familiarity with cybersecurity industry standards and frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Preferred certifications: CISSP, CCSP, CISM, CISA, CompTIA Security+, GIAC.

¿Por qué Aristocrat?

Aristocrat es una empresa líder a nivel mundial en contenido y tecnología de juegos, y una editorial de referencia en juegos móviles gratuitos. Ofrecemos un alto rendimiento a nuestros clientes B2B y hacemos participes a millones de personas que disfrutan con nuestros juegos de casino y para móviles. Y aunque nos centramos en la diversión, no olvidamos nunca nuestras responsabilidades. Nos esforzamos para ser referentes en juego responsable y elevar los estándares en gobernanza corporativa, bienestar de los empleados y sostenibilidad. Somos una empresa diversa, unida por valores comunes y una misión inspiradora: llenar de alegría la vida gracias al poder del juego.

Nuestro compromiso es crear un entorno en el que se valoren las diferencias individuales y donde todos los empleados tengan la oportunidad de desarrollar su potencial. Damos la bienvenida y animamos a presentar su candidatura a personas de todas las edades, géneros, razas, etnias, orígenes culturales, condición de discapacidad o que se identifiquen como parte del colectivo LGBTQ+. EEO H/M/D/V

• Empresa líder mundial en entretenimiento de juegos

• Atractivo paquete de beneficios

• Oportunidades de carrera a nivel internacional

Nuestros valores

• All about the Player

• Talent Unleashed

• Collective Brilliance

• Good Business Good Citizen

Disponibilidad para viajar

Ninguna

Información adicional

En este momento, no podemos tramitar visados de trabajo para este puesto. Los candidatos deben tener permiso para trabajar a tiempo completo en el país donde se ofrece la vacante, sin necesidad de visado ahora ni en el futuro.