InfoSec GRC Analyst — Risk, Policy & Compliance

ICE; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to support the global Information Security program. You will gain exposure to the full suite of ICE's businesses and products underpinning the company.

The role focuses on governance, risk, and compliance, developing security metrics, maintaining policies, and handling regulator and customer inquiries. A background in information security and strong written communication are essential.

Qualifications

• Bachelor's degree or higher in Information Security, Engineering, MIS, CIS, or related field or equivalent experience.
• Advanced certifications such as CISSP are preferred.
• Experience with regulatory compliance and governance is a plus.

Responsibilities

• Security Metrics – Produces regular reports on the Information Security program.
• Policies and Procedures – Maintains corporate IS policies and maps to control standards.
• Regulator, Audit, and Customer Inquiries – Responds to inquiries in an organized, repeatable fashion.
• Recertification – Manages hire, transfer, termination protocol and access reviews.
• Security Awareness – Builds and maintains security education programs.
• Risk Assessment – Documents and reports risks, controls, findings, and remediation activity.

Skills

Security Metrics

Policies & Procedures

Regulator Inquiries

Recertification

Security Awareness

Risk Assessment

Education

CISSP or advanced certification

University degree in Information Security or related

Tools

NIST CSF

CIS

GRC Platforms

Excel

Job description

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to support the global Information Security program. You will gain exposure to the full suite of ICE's businesses and products underpinning the company.

The role focuses on governance, risk, and compliance, developing security metrics, maintaining policies, and handling regulator and customer inquiries. A background in information security and strong written communication are essential.