InfoSec GRC Analyst — Risk, Policy & Compliance

ICE; Atlanta (GA); Sur place; USD 90 000 - 120 000; Plein temps

Résumé du poste

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to support the global Information Security program. You will gain exposure to the full suite of ICE's businesses and products underpinning the company.

The role focuses on governance, risk, and compliance, developing security metrics, maintaining policies, and handling regulator and customer inquiries. A background in information security and strong written communication are essential.

Qualifications

• Bachelor's degree or higher in Information Security, Engineering, MIS, CIS, or related field or equivalent experience.
• Advanced certifications such as CISSP are preferred.
• Experience with regulatory compliance and governance is a plus.

Responsabilités

• Security Metrics – Produces regular reports on the Information Security program.
• Policies and Procedures – Maintains corporate IS policies and maps to control standards.
• Regulator, Audit, and Customer Inquiries – Responds to inquiries in an organized, repeatable fashion.
• Recertification – Manages hire, transfer, termination protocol and access reviews.
• Security Awareness – Builds and maintains security education programs.
• Risk Assessment – Documents and reports risks, controls, findings, and remediation activity.

Connaissances

Security Metrics

Policies & Procedures

Regulator Inquiries

Recertification

Security Awareness

Risk Assessment

Formation

CISSP or advanced certification

University degree in Information Security or related

Outils

NIST CSF

CIS

GRC Platforms

Excel

Description du poste

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to support the global Information Security program. You will gain exposure to the full suite of ICE's businesses and products underpinning the company.

The role focuses on governance, risk, and compliance, developing security metrics, maintaining policies, and handling regulator and customer inquiries. A background in information security and strong written communication are essential.