Information Security and Technology Associate

EDX Markets; Chicago (IL); On-site; USD 70,000 - 110,000; Full time

Job summary

EDX Markets is seeking a full-time Information Security and Technology Associate in Chicago to join our Information Security team. You will contribute to security operations, access management, risk and compliance initiatives, and core IT operations.

Collaborating with Security, Compliance, Infrastructure, and Engineering, you will help maintain secure systems and strengthen our security posture. Responsibilities include monitoring, incident response, vulnerability remediation, vendor risk

Qualifications

• Minimum 1 year of IT support, systems administration, security operations, or related role.
• Exposure to security operations, incident response, alert investigation, vulnerability remediation, or compliance support.
• Hands-on experience with identity and access management workflows.
• Experience supporting IT help desk operations and user support workflows.
• Experience with endpoint management and asset lifecycle support.
• Ability to follow runbooks, SOPs, and escalation paths with strong documentation skills.
• Interest in growing within cybersecurity, security operations, risk management, or compliance.

Responsibilities

• Assist with security monitoring, alert investigation, incident response, containment, remediation follow-up, and post-incident reviews.
• Support vulnerability tracking and remediation workflows, including triage of scan findings and evidence collection.
• Support regulatory frameworks (SOC 1/2, ISO 27001) through control execution, documentation, and evidence collection.
• Contribute to vendor risk assessments, internal audits, remediation tracking, and supporting documentation.
• Provision and deprovision access across systems in line with least-privilege principles.
• Serve as Tier 1 on-call support during weekly rotation for IT and security issues.
• Act as primary contact for internal IT requests, supporting core IT operations and help desk.
• Triage, prioritize, resolve, and escalate IT issues while delivering high-quality employee support.
• Maintain and improve IT service management workflows using Jira Service Management.
• Maintain asset inventory and lifecycle tracking for endpoints, including macOS and iOS devices.
• Coordinate patch management across workstations, devices, and network appliances.
• Identify opportunities to automate, standardize, and scale IT and security operations.

Skills

Security operations

Incident response

Identity and access management

Help desk operations

Ticket triage

Endpoint management

Documentation

Scripting (Python, etc.)

IAM workflows

Security tools familiarity

Tools

CrowdStrike

Okta

Jamf

Datadog

Microsoft 365

Jira Service Management

EDR

SIEM

AWS

Azure

GCP

Job description

Information Security and Technology Associate

• Chicago

EDX is seeking a full-time Information Security and Technology Associate to join our Information Security team. This role is focused on supporting security operations, access management, risk management, compliance initiatives, and core IT operations. The successful candidate will work closely with Information Security, Compliance, Infrastructure, and Engineering teams to help maintain secure, reliable systems and strengthen EDX’s security posture. This role reports to the CISO.

EDX is a digital assets marketplace and clearinghouse created in collaboration between US retail wealth managers and market makers for secure and compliant trading and clearing of digital assets, which is bringing best practices from existing markets to crypto (e.g., segregation of duties to reduce conflicts of interest between a market maker and an exchange) while mitigating the conflicts of interest in current digital asset markets.

Responsibilities:

• Assist with security monitoring, alert investigation, incident response, containment, remediation follow-up, and post-incident reviews
• Support vulnerability tracking and remediation workflows, including triage of scan findings and evidence collection
• Support SOC 1, SOC 2, ISO 27001, and other applicable regulatory frameworks through control execution, documentation, and evidence collection
• Contribute to vendor risk assessments, internal audits, remediation tracking, and supporting documentation such as SOPs, runbooks, and incident playbooks
• Provision and deprovision access across systems in alignment with least-privilege principles, including support for IAM initiatives and periodic access reviews
• Serve as Tier 1 on-call support during a weekly rotation, handling initial triage, escalation, and handoff for off-hours IT and security issues
• Serve as the primary point of contact for internal IT requests, supporting core IT operations and help desk activities
• Triage, prioritize, resolve, and escalat e?? IT issues while delivering a consistent, high-quality employee support experience
• Maintain and improve IT service management workflows using Jira Service Management
• Maintain asset inventory and lifecycle tracking for endpoints and mobile devices, including enrollment, configuration, patching, and support for macOS and iOS devices
• Coordinate patch management across workstations, mobile devices, office network appliances, and endpoint applications
• Identify opportunities to automate, standardize, and scale IT and security operations

Experience:

• Minimum 1 year of experience in IT support, systems administration, security operations, or a related role
• Exposure to security operations, incident response, alert investigation, vulnerability remediation, or compliance support
• Hands‑on experience with identity and access management, including onboarding, offboarding, access provisioning, and deprovisioning workflows
• Experience supporting IT help desk operations, ticket triage, escalation, and user support workflows
• Experience with endpoint management, SaaS platforms, and asset lifecycle support
• Familiarity with endpoint enrollment, configuration, patching, and device support, particularly in macOS and iOS environments
• Ability to follow documented runbooks, escalation paths, SOPs, and operational procedures
• Strong written documentation skills for procedures, control evidence, incident notes, and process improvements
• Interest in growing within cybersecurity, security operations, risk management, or compliance

Nice to Have :

• Hands‑on familiarity with security, IAM, endpoint, observability, and IT service management tools such as CrowdStrike, Okta, Jamf, Datadog, Microsoft 365, and Jira Service Management
• Exposure to EDR, SIEM, vulnerability scanners, and other security monitoring platforms
• Exposure to security, audit, or regulatory frameworks such as SOC 1, SOC 2, ISO 27001, OCC, FFIEC, MAS TRM, or similar standards
• Exposure to cloud security or cloud administration concepts in AWS, Azure, or GCP
• Basic scripting or automation experience using Python, Bash, PowerShell, or similar tools
• Certifications or active pursuit of certifications such as Security+, SSCP, AWS Cloud Practitioner, or ITIL Foundation
• Experience in regulated financial services, digital assets, or other security-conscious environments