Chief Information Security Officer

The SVP, Chief Information Security Officer (CISO) will be responsible for evolving and enhancing Aristocrat’s enterprise-wide information security strategy, ensuring the protection of our data, systems, and networks across all global operations. Preferably based in Las Vegas, or willing to commute on a regular basis; this position reports to the Group Chief Information Officer you will play a critical role in safeguarding our business from emerging cybersecurity threats, ensuring compliance with industry standards, and fostering a culture of security awareness across the organization. The CISO works proactively with business units and ecosystem partners to implement and uphold agreed-upon information security policies and standards, overseeing cybersecurity and risk management activities to achieve business outcomes reliant on technology. A high-profile and influential role, you will liaise directly with the Group CEO and Board on critical information security matters.

What You'll Do

Strategic Leadership:

• Lead and evolve our comprehensive information security strategy aligned with the company's business goals and objectives.
• Own the implementation and management of the company's cybersecurity architecture, policies, and procedures.
• Lead and manage an information security governance structure  and serve as the primary advisor to the Executive Leadership Team, CEO and Board on all information security matters.
• Partner with our CTO organization, BUs and Studios to develop security measures for company products, supporting the identification and mitigation of cybersecurity risks throughout the product lifecycle.
• Interface with Customers and peer CISOs within customer organizations to understand security needs and evangelize our Security Program.

Risk Management:

• Identify, assess, and prioritize potential security risks and vulnerabilities across the organization.
• Oversee and evolve our risk management framework to mitigate risks and ensure business continuity.
• Oversee regular security assessments, penetration tests, and audits to ensure compliance with industry standards and regulations.
• Partner with Group Risk, Privacy, and Legal to drive positive outcomes in rates and coverage levels for Cyber Insurance renewals.

Security Operations:

• Lead the security operations team in monitoring, detecting, and responding to security incidents in real-time.
• Oversee and manage advanced security technologies, including intrusion detection solutions, vulnerability management solutions, and identity management solutions.
• Coordinate with IT and other departments to ensure the secure integration of new technologies and platforms.

Compliance and Governance:

• Ensure compliance with global cybersecurity regulations, industry standards, and best practices (e.g., GDPR, CCPA, ISO/IEC 27001, NIST).
• Partner with our Group Privacy Officer to evolve and enforce policies related to data protection, privacy, and information security.
• Prepare and present reports to the executive team and board of directors on the state of the company's cybersecurity posture.

Incident Response and Recovery:

• Lead the company's incident response team, ensuring rapid identification, containment, and remediation of security incidents.
• Oversee and manage our disaster recovery framework to minimize the impact of security breaches.
• Coordinate with legal, privacy, communications, and other relevant teams during security incidents to manage internal and external communications.

Security Awareness and Training:

• Foster a culture of security awareness throughout the organization by developing and delivering training programs.
• Collaborate with HR and other departments to ensure ongoing education and awareness of cybersecurity best practices.
• Stay informed about the latest cybersecurity trends, threats, and technologies, and apply this knowledge to enhance the company's security posture.

What We're Looking For

• Bachelor’s degree in Information Security, Computer Science, or a related field (Master’s degree preferred).
• 15+ years of experience in information security, with at least 5 years in a Senior IS leadership role (SVP IS, CISO)
• Proven experience in developing and implementing enterprise-wide security strategies in a multi-faceted global technology organization.
• Strong background in risk management, compliance, and incident response.
• Relevant certifications such as CISSP, CISM, CISA, or equivalent are highly desirable.
• Deep understanding of cybersecurity frameworks, technologies, and best practices.
• Knowledge of security frameworks (ISO/IEC 2700x,