Senior Associate, Operational Risk Management, IT and Security

The Options Clearing Corporation (OCC); Chicago (IL); Hybrid; USD 98,000 - 142,000; Full time

Benefits offered by this job

Hybrid work environment up to 2 days/ω

Tuition Reimbursement

Student Loan Repayment Assistance

Technology Stipend

Generous PTO and Parental leave

401k Employer Match

Medical, dental and vision benefits

Job summary

The Options Clearing Corporation (OCC) seeks a risk-focused professional to support the Director of Operational Risk in evaluating IT and Security risks and applying risk management frameworks across processes and controls. You will coordinate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to align with OCC strategy.

You will lead assessments, maintain risk inventories, and help automate oversight while communicating results to governance and leadership.

Qualifications

• Advanced IT and Security risk understanding, incl. cybersecurity, DR, databases, networks, and mainframe tech.
• Familiarity with cybersecurity landscape affecting CCPs.
• Ability to act as a trusted advisor and provide effective challenge.
• Creative, independent thinker with willingness to develop and drive new ideas.
• Excellent written, verbal and presentation skills.
• Team-oriented and able to collaborate across departments.
• Ability to work under pressure and tight deadlines.
• Familiarity with Financial Market Utilities, securities and derivatives markets.
• Ability to work in a regulated environment incl. SEC, CFTC, Fed; Covered Clearing Agency regs.
• Understanding of cloud technologies and migration to cloud platforms.
• Understanding of tools for capacity management, network architecture, threat assessment, code review.

Responsibilities

• Collaborate with IT, Security, and Audit to strengthen IT and Security risk management.
• Lead IT/Security risk identification and assessment against frameworks.
• Drive adherence to frameworks, guidance, and standards.
• Maintain risk inventories, taxonomies, and related artifacts.
• Lead IT and Security risk assessments aligned to required controls.
• Generate Archer data reports for stakeholders, including regulators.
• Automate IT and Security risk oversight via data analytics.
• Communicate assessment results to governance and leadership.
• Support development of risk program policies and procedures.
• Track internal findings and external exam issues in ORMC.

Skills

IT risk

Security risk

Cybersecurity

Disaster recovery

Database management

Network engineering

Storage management

Software development

Mainframe tech

Operational risk

Education

Bachelor’s Degree in Information Systems, Computer Science, Cybersecurity

Tools

Archer

Tableau

SQL

Excel

Job description

What You’ll Do

This role will provide critical support to the Director of Operational Risk to evaluate IT and Security risks by assisting with risk assessments and applying aspects of the risk management framework across the process, risk, and control universe. Additionally, this role will help with the risk assessment program activities, coordinate with other functions (e.g. IT, Security, TPRM, Legal, Compliance, and Internal Audit) and facilitate appropriate Corporate Risk governance to ensure alignment to OCC strategy and short-term objectives.

Primary Duties and Responsibilities

• Collaborate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to ensure that Corporate Risk contributes to strengthening the overall effective management of IT and Security risk across the organization.
• Lead OCC’s risk identification and assessment process for IT/Security risks and verify the consistency and reliability of the associated technology frameworks (e.g., NIST, COBIT, ISO) and systems supporting clearing and settlement activities.
• Drive adherence to methodologies, guidance, and standards applicable to risk identification and assessment frameworks.
• Maintain risk inventories, taxonomies, and other elements supporting IT/Security risk management and compliance activities.
• Lead and execute the IT and Security risk assessment process, while aligning to the risk and control universe, and regulatory requirements and expectations.
• Generate reports of Archer data for various stakeholders, including regulators.
• Help automate IT & Security risk oversight through use of data analytics processes.
• Communicate results of risk assessments to governance committees, business owners, and various levels of leadership.
• Collaborate on the enhancement and maintenance of Corporate Risk program methodologies, policies, procedures, and job aides, including the development of new program activities.
• Track and update ORMC team internal findings, external exam issues, and business area self-identified issues resulting from Enterprise Risk Assessment.

Supervisory Responsibilities

None

Qualifications

• [Required] Advanced understanding of IT risk and Security risk, specifically relating to cybersecurity (e.g., blue team, red team, threat & vulnerability management), disaster recovery, database management, network engineering, storage management, software development, and mainframe technologies. Intermediate understanding of Operational risk.
• [Required] Familiarity with the evolving cybersecurity landscape impacting central clearing counterparties (CCPs).
• [Required] Ability to act as a trusted advisor and provide effective challenge.
• [Required] Creative, independent thinker, with a willingness to develop and drive new ideas.
• [Required] Excellent written, verbal and presentation skills.
• [Required] Must be team-oriented and be able to collaborate effectively in department and cross-departmental efforts.
• [Required] Ability to work under pressure and with tight deadlines.
• [Preferred] Familiarity with Financial Market Utilities; securities and derivatives markets.
• [Preferred] Ability to work in a highly regulated environment, including with the SEC, CFTC, and Federal Reserve; Familiarity with the Covered Clearing Agency regulations.
• [Preferred] Understanding of cloud technologies, including experience supporting migration to a cloud platform.
• [Preferred] Understanding of tools supporting capacity management, network architecture, threat assessment, code review, and software development.

Technical Skills

• [Required] Proficient in Microsoft Word, Excel, Access, and PowerPoint.
• [Required] Experience with eGRC systems (e.g., Archer).
• [Required] Experience with data analytic techniques and tools (e.g., Tableau, SQL).

Education and/or Experience

• [Required] Bachelor’s Degree in Information Systems, Computer Science, Cybersecurity (or equivalent) preferred.
• [Required] 3+ years of experience in enterprise risk, cybersecurity, IT audit, technology risk, security risk, or risk consultancy, specifically with focus on assessing IT and Security risk.
• [Preferred] Consulting experience.

Certificates or Licenses

• [Preferred] Certification such as: CISSP, Security+, CSX-P, CET, CISA or CISM.

About Us

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.

Benefits

• A hybrid work environment, up to 2 days per week of remote work
• Tuition Reimbursement to support your continued education
• Student Loan Repayment Assistance
• Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely
• Generous PTO and Parental leave
• 401k Employer Match
• Competitive health benefits including medical, dental and vision

Visit https://www.theocc.com/careers/thriving-together for more information.

Compensation

• The salary range listed for any given position is exclusive of fringe benefits and potential bonuses. If hired at OCC, your final base salary compensation will be determined by factors such as skills, experience and/or education.
• In addition, we believe in the importance of pay equity and consider internal equity of our current team members as part of any final offer.
• We typically do not hire at the maximum of the range in order to allow for future and continued salary growth. We also offer a substantial benefits package as noted on www.theocc.com/careers
• All employees may be eligible for a discretionary bonus. Discretionary bonuses are based on various factors, including, but not limited to, company and individual performance and are not guaranteed.

Salary Range

$98,100.00 - $142,050.00

Incentive Range

8% to 15%

This position is eligible for an annual discretionary incentive compensation award, for which the target range is listed above (see Incentive Range). The amount of such award, if any, will be based on various factors, including without limitation, both individual and company performance.

OCC is an Equal Opportunity Employer