Senior Manager, Product & Application Security

At Aristocrat, we strive to craft a world-class environment where innovation and ambition are central. Our mission is to bring happiness to life through the power of play. As a Senior Manager of Product & Application Security, you will have a key role in securing our latest gaming products. This is an outstanding opportunity to lead a team committed to flawless security efforts, fostering Aristocrat’s mission while keeping our products safe and competitive.

You will collaborate with Global Information Security leadership and Security Architecture to align security initiatives with company goals. You will drive the optimization and automation of security measures applied to products, ensuring strong risk management and compliance with industry standards, supporting efforts to shift left and secure our products. Your role will involve multi-functional collaboration with security teams dedicated to building solutions, enterprise engineering, operations, and governance. You will also engage closely with Aristocrat Labs and Product Development teams to effectively mitigate security threats as needed. Additionally, you will nurture innovation in security practices, positioning Aristocrat as an inspiring leader in the cybersecurity landscape.

What You'll Do

• Lead a group of cybersecurity engineers in the creation, deployment, and upkeep of the organization's product security measures.

• Support the Confidentiality, Integrity, and Availability of product development practices.

• Collaborate with Security Architecture in choosing, evaluating, implementing, overseeing, operating, automating, and sustaining Aristocrat's protective systems for the product.

• Align and complete Global Information Security’s strategy and program roadmap developed and maintained by Security Architecture.

• Develop product security engineering rigor, standards, and effective operations.

• Partner with cybersecurity operations, attack surface management, and threat intelligence for continuous control improvement activities.

• Maintain timely, accurate, and effective metrics & reporting related to product security measures for critical applications to, and for, executive-level management.

• Aid in following up on product security issues or prospects for improving security risk.

• Provide domain expertise on cybersecurity standards, strategies, and areas of opportunity to optimize product security practices & controls.

• Stay ahead of emerging security trends, technologies, and threats, making recommendations to improve Aristocrat’s security posture.

• Develop and apply product security procedures and technical security requirements, including documentation for developer usage of product security controls.

• Support acquisition due diligence for information security risks and support control development for integration.

• Manage vulnerabilities and assist with incident response activities as needed.

What We're Looking For

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, or a related field.

• 10+ years of relevant experience.

• Minimum of 6 years of multifaceted experience leading information technology and/or product security teams in engineering, building, or operations.

• Proven experience working with a geographically dispersed team.

• Proven experience with product security functions and safeguards including Secure Development Lifecycle (SDL) Technologies, Static Application Security Testing (SAST) tools, Dynamic Application Security Testing (DAST) tools, Software Composition Analysis (SCA) tools, and Application Security Posture Management (ASPM) tools.

• Familiarity with Open Web Application Security Project (OWASP) SAMM (Software Assurance Maturity Model) framework.

• Experienced knowledge of information security technologies, networking, cloud, and infrastructure architecture in a global capacity required.

• Proven ability to develop and track key performance metrics

Why Aristocrat?

Aristocrat is a world leader in gaming content and technology, and a top-tier publisher of free-to-play mobile games. We deliver great performance for our B2B customers and bring joy to the lives of the millions of people who love to play our casino and mobile games. And while we focus on fun, we never forget our responsibilities. We strive to lead the way in responsible gameplay, and to lift the bar in company governance, employee wellbeing and sustainability. We’re a diverse business united by shared values and an inspiring mission to bring joy to life through the power of play.

We aim to create an environment where individual differences are valued, and all employees have the opportunity to realize their potential. We welcome and encourage applications from all people regardless of age, gender, race, ethnicity, cultural background, disability status or LGBTQ+ identity. EEO M/F/D/V

• World Leader in Gaming Entertainment

• Robust benefits package

• Global career opportunities

Our Values

• All about the Player

• Talent Unleashed

• Collective Brilliance

• Good Business Good Citizen

Travel Expectations

Pay Range

Our goal is to pay a market competitive salary focusing near the median of our pay ranges. However, final offers for all positions will be based on several factors such as experience level, education, skills, work location, and internal pay equity.

This position offers a comprehensive benefits package, including health, dental, and vision insurance, paid time off, and a 401(k) plan with employer matching, more details available at https://atibenefits.com/.

Additional Information

This role is subject to mandatory background screening and regulatory approvals. As part of your employment with Aristocrat, you may be required to complete a criminal background check, submit fingerprints, and obtain licenses or registrations with applicable gaming regulatory authorities.

Aristocrat operates in a highly regulated environment and holds licenses in over 340 gaming jurisdictions worldwide. To meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations/tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat’s gaming licenses. The specific information required may vary depending on the jurisdiction and project assignment.