Analyst, Information Security GRC

About the role

Analyst on the global Information Security GRC team at Intercontinental Exchange: maintains security policies and procedures mapped to control standards, operates access recertification, supports audit/regulator inquiries, produces security metrics, and runs the risk assessment platform. Onsite in Atlanta. Entry-level; degree in a related field or equivalent experience; no years-of-experience figure stated.

Requirements

• University degree in Information Security, Engineering, MIS, CIS, or related discipline, or equivalent years of experience
• Advanced technical writing and/or communication education and experience
• Plus: systems administration and/or IP networking experience
• Plus: regulatory compliance experience
• Plus: experience in an exchange, trading facility, or financial services
• Plus: senior management and board metrics generation and communication
• Plus: advanced certifications such as CISSP
• Specific technologies: Excel, workflow automation, data collection/normalization/visualization, scripting, regex, light SDLC, project management, NIST CSF, CIS, GRC platforms

What you'll do

• Security Metrics: produce regular reports on status of the Information Security program
• Policies and Procedures: maintain corporate InfoSec policies and procedures and map them to control standards
• Regulator, Audit and Customer Inquiries: organize documentation and respond to inquiries
• Recertification: operate periodic hire/transfer/termination compliance and access review processes
• Security Awareness: build and maintain awareness and education programs
• Risk Assessment: build and operate the platform to document, measure and report assessments, risks, controls, findings and remediation

Where this was posted

• Hiring Cafe

  last seen 37m ago
  View on Hiring Cafe