Information Security GRC Analyst: Risk & Compliance

Intercontinental Exchange (ICE); Atlanta (GA); Presencial; USD 90.000 - 110.000; Jornada completa

Descripción de la vacante

Intercontinental Exchange, Inc. is seeking an Analyst for Information Security GRC to support the global program across ICE businesses. This role focuses on governance, risk, and compliance, with emphasis on metrics, policy maintenance, and regulator/auditor responsiveness.

The incumbent will drive risk assessments, remediation activities, and security awareness initiatives while interfacing with senior leadership and board-level metrics.

Formación

• Bachelor-level degree in information security, engineering, MIS, CIS, or related field or equivalent experience.
• Experience with systems administration and/or IP networking is a plus.
• Experience with regulatory compliance is a plus.
• Experience in financial services or exchanges is a plus.
• Advanced certifications such as CISSP are a plus.
• Strong technical writing and communication skills.

Responsabilidades

• Produce regular reports on the status of the Information Security program.
• Maintain corporate Information Security policies and procedures and map them to controls.
• Handle regulator, audit, and customer inquiries with organized documentation.
• Operate recertification processes for hire, transfer, termination and access reviews.
• Develop and maintain security awareness programs.
• Document, measure, and report risk assessments, controls, findings, and remediations.

Conocimientos

Security metrics

Regulatory compliance

Risk assessment

Technical writing

Senior management communication

IP networking

Systems administration

Educación

University degree in Information Security, Engineering, MIS, CIS, or related discipline

Herramientas

CISSP certification

Descripción del empleo

Intercontinental Exchange, Inc. is seeking an Analyst for Information Security GRC to support the global program across ICE businesses. This role focuses on governance, risk, and compliance, with emphasis on metrics, policy maintenance, and regulator/auditor responsiveness.

The incumbent will drive risk assessments, remediation activities, and security awareness initiatives while interfacing with senior leadership and board-level metrics.