{"id":108700,"url":"https://alion.io/job/aristocrat-leisure-grc-application-risk-analyst","title":"Cybersecurity Risk Analyst","company":{"id":8402,"name":"Aristocrat Leisure","domain":"aristocrat.com","url":"https://alion.io/company/aristocrat","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":22,"ghost_share":0,"stale_share":0.409,"repost_share":0.182,"time_to_fill_p50_days":36,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":108000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false}],"status":"closed","first_seen_at":"2026-07-29T00:00:00Z","employer_posted_date":"2026-09-17","last_verified_at":"2026-11-03T16:46:32Z","board_verified":false,"closed_at":"2026-11-03T16:46:32Z","days_open":97,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":97},"description":"At Aristocrat, we are driven by our mission to bring happiness to life through the power of play. We are a world-class team united by our passion for gaming and innovation, continually striving for excellence. As a Cyber Specialist, you'll be at the forefront of our cybersecurity efforts, ensuring our system, products, and processes are secure. This role is pivotal in maintaining our flawless security standards, and you'll have the chance to create a significant impact on our organization. Join us in our ambitious journey and be part of a team that values collaboration, inclusion, and continuous improvement!\nThis is a hybrid position based in Krakow, in the Unity Tower office. Team members are required to be in the office three days per week, with flexibility to select their in-office days based on personal preference and business needs.\nWhat You'll Do\nPerform technical security assessments of web apps, mobile apps, APIs, applications, systems, cloud services, technology platforms, business processes, and third-party solutions.\n\nEvaluate application security controls, including authentication, authorization, session management, encryption, secrets management, logging, and secure configuration practices to detect potential risks, control gaps, and areas for improvement.\n\nDevelop practical, risk-based recommendations that balance security, operational requirements, and business objectives.\n\nDocument findings, conclusions, and risk decisions in a clear and professional manner.\n\nReview evidence supporting security controls and evaluate control efficiency.\n\nProduce executive-ready assessment summaries, threat analysis, and remediation recommendations.\n\nPresent findings to both technical and non-technical audiences.\n\nSupport reporting on assessment activity, emerging risks, remediation efforts, and security trends.\n\nReview vendor security questionnaires, SOC reports, certifications, penetration testing reports, and supporting security documentation.\n\nEvaluate the security measures of potential and current vendors, SaaS providers, cloud service providers, and technology partners.\n\nPartner with Procurement, Legal, business teams, and vendors to resolve security concerns and detail residual risk.\n\nAssist with internal audits, external audits, client assurance requests, and regulatory examinations.\n\nHave a current, working awareness of ISO 27001, NIST CSF, NIST 800-53 and CIS Controls, PCI DSS, NIS2, OWASP, GLI and applicable regulatory requirements.\n\nContribute to the ongoing improvement of security assessment processes, templates, standards, and reporting practices.\n\nWhat We're Looking For\nBachelor's degree in Cybersecurity, Information Security, Information Systems, Risk Management, Audit, Computer Science, or a related field, or equivalent experience.\n\nMinimum of 5+ years of experience in cybersecurity, IT risk, IT audit, compliance, third-party risk management, security assessments, or related field.\n\nProven experience conducting independent security assessments and detailing risk-based findings.\n\nExperience reviewing architecture and infrastructure security controls, vendor documentation, SOC reports, audit artifacts, remediation plans, and compliance evidence.\n\nExperience collaborating within enterprise technology settings, cloud platforms, and third-party service vendors.\n\nAt least one of the following certifications: CISSP, CISA, CRISC, GIAC certifications (others are strongly preferred).\n\nExperience performing vendor risk assessments or third-party security reviews.\n\nExperience supporting audits, examinations, or client assurance activities.\n\nFamiliarity with cloud security, application security, identity and access management, or data protection controls.\n\nExperience using GRC, workflow, ticketing, or evidence management platforms.\n\nThis job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat.\nCompensation Philosophy\nWe offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location. \nDepending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits. \nSpecific details about compensation and benefits for this position will be discussed during the recruitment process.","description_format":"text","description_chars":4795,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual bonuses","Insurance coverage","Retirement plans"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Gaming","Mobile Games"],"lifecycle":[{"event":"open","at":"2026-07-29T00:00:00Z"},{"event":"close","at":"2026-11-03T16:46:32Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/aristocrat-leisure-grc-application-risk-analyst","json_url":"https://alion.io/job/aristocrat-leisure-grc-application-risk-analyst.json","meta":{"generated_at":"2026-11-06T14:01:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25854,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8402},"rest":"https://alion.io/mcp/rest/get_company?id=8402"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faristocrat-leisure-grc-application-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faristocrat-leisure-grc-application-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faristocrat-leisure-grc-application-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aristocrat-leisure-grc-application-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faristocrat-leisure-grc-application-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":108700}},{"tool":"search_jobs","arguments":{"company":"aristocrat.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":108700},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}