Security GRC Analyst: Risk, Compliance & Metrics

ICE; Provo (UT); On-site; USD 85,000 - 115,000; Full time

Job summary

Intercontinental Exchange, Inc. in Provo, UT, seeks an Analyst for Information Security GRC to participate in our global information security program.

You will work with business units and products underpinning ICE to implement governance, risk, and compliance controls and reporting. The role focuses on maintaining security policies, conducting risk assessments, and managing inquiries from regulators, auditors, and customers.

Qualifications

• University degree in Information Security, Engineering, MIS, CIS, or related discipline or equivalent years of experience required.
• Advanced certifications (for example, the CISSP) are highly valued.
• Experience with Regulatory Compliance is a plus.
• Experience in an exchange, trading facility, or financial services is a plus.
• Experience with senior management and board metrics generation and communication is a plus.

Responsibilities

• Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program
• Policies and Procedures – Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards
• Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries in an organized and repeatable fashion
• Recertification – Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted
• Security Awareness – Builds and maintains company awareness and education programs
• Risk Assessment – Builds and operates the company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity

Skills

Security metrics

Policy administration

Regulatory inquiries handling

Risk assessment

Education

University degree in Information Security, Engineering, MIS, CIS, or related discipline

Advanced certifications (e.g., CISSP)

Tools

Excel

Workflow automation tools

GRC platforms

Job description

Intercontinental Exchange, Inc. in Provo, UT, seeks an Analyst for Information Security GRC to participate in our global information security program.

You will work with business units and products underpinning ICE to implement governance, risk, and compliance controls and reporting. The role focuses on maintaining security policies, conducting risk assessments, and managing inquiries from regulators, auditors, and customers.