InfoSec GRC Analyst - Risk, Policy & Compliance

ICE; Jacksonville (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to join the global Information Security program. The role provides exposure to the full suite of ICE businesses and products, and focuses on governance, risk, and compliance across security controls and regulatory inquiries.

The candidate will develop security metrics, maintain policies, manage audits, and oversee recertification and awareness initiatives to protect the organization and its customers.

Qualifications

• University degree in Information Security, Engineering, MIS, CIS, or related discipline or equivalent years of experience required.
• Advanced certifications (e.g., CISSP) are a plus.
• Experience with Regulatory Compliance is a plus.
• Experience with senior management and board metrics generation is a plus.

Responsibilities

• Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program.
• Policies and Procedures – Maintains corporate Information Security policies and maps them to control standards.
• Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries.
• Recertification – Manages hire, transfer, termination processes and conducts regular access reviews.
• Security Awareness – Builds and maintains company awareness and education programs.
• Risk Assessment – Documents, measures, and reports assessments, risks, controls, findings, and remediation activity.

Skills

Security governance

Risk assessment

Data reporting

Education

University degree in Information Security, Engineering, MIS, CIS, or related discipline

Tools

Excel

Workflow automation tools

Data visualization tools

GRC Platforms

Job description

Intercontinental Exchange, Inc. is seeking an Analyst, Information Security GRC to join the global Information Security program. The role provides exposure to the full suite of ICE businesses and products, and focuses on governance, risk, and compliance across security controls and regulatory inquiries.

The candidate will develop security metrics, maintain policies, manage audits, and oversee recertification and awareness initiatives to protect the organization and its customers.