Analyst, Information Security GRC
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
Role Overview
The Analyst, Information Security GRC is part of a team responsible for the global Information Security program.
The role would gain exposure to the full suite of businesses and products which underpin the Parent ICE company.
Information Security (“IS”) is charged with:
• Preventing impactful cybersecurity and physical security incidents,
• maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program, and
• avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls.
Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within.
Key Skills for This Role
Full Job Posting
Job Purpose
The Analyst, Information Security GRC is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent ICE company.
Information Security (“IS”) is charged with:
Preventing impactful cybersecurity and physical security incidents,
maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program, and
avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls.
Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within.
Responsibilities
- Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program
- Policies and Procedures – Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards
- Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries in an organized and repeatable fashion
- Recertification – Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted
- Security Awareness – Builds and maintains company awareness and education programs
- Risk Assessment – Builds and operates the company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity
Knowledge and Experience
University degree in Information Security, Engineering, MIS, CIS, or related discipline or equivalent years of experience required
Experience with Systems Administration and/or IP Networking is a plus
Experience with Regulatory Compliance is a plus
Experience in an exchange, trading facility, or financial services is a plus
Experience with senior management and board metrics generation and communication is a plus
Advanced certifications (for example, the CISSP)
Advanced technical writing and/or communication education and experience
Specific Technologies
Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization. Scripting, regular expressions, string-parsing, light SDLC, and project management. NIST Cyber Security Framework, CIS, and GRC Platforms.
About Intercontinental Exchange
Global operator of financial exchanges, clearing houses, and mortgage technology.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Intercontinental Exchange
Associate, Feeds Content Operations
Hyderabad, IND
Senior Engineer, Systems Engineering
Atlanta, USA
Senior Engineer, IT
Jacksonville, USA
Director, Application Security
Atlanta, USA
Senior Kubernetes Developer, Platform Engineering
Atlanta, USA
Risk Analyst
New York City, USA
Director, Application Security
Atlanta, USA
Senior Engineer, Systems Engineering
Atlanta, USA