Senior Engineer, Information Security GRC

Intercontinental Exchange Holdings, Inc.; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Intercontinental Exchange Holdings, Inc. is seeking a Senior Engineer, Information Security, GRC to join the global information security program. You will work across ICE's businesses and products, helping to prevent incidents and maintain a best-in-class security posture.

The role emphasizes governance, risk, and compliance, with responsibility for policy maintenance, risk assessments, audits, and security awareness programs to protect customers, regulators, and stakeholders.

Qualifications

• University degree in Information Security, Engineering, MIS, CIS, or related discipline
• 5+ years of relevant work experience

Responsibilities

• Produce regular security status reports using automated and manual processes.
• Maintain Information Security policies and procedures and map them to control standards.
• Organize and update documentation; respond to regulator, audit, and customer inquiries consistently.
• Oversee periodic access recertification, hires/transfers/terminations protocols, and access reviews.
• Develop and maintain company security awareness and education programs.
• Document, measure, and report security risks, controls, findings, and remediation.

Education

Information Security or related degree

Job description

Overview

Job Purpose

The Senior Engineer, Information Security, GRC is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent ICE company.

Information Security (“IS”) is charged with:

• Preventing impactful cybersecurity and physical security incidents,
• maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program, and
• avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls.

Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within.

Responsibilities

• Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program
• Policies and Procedures – Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards
• Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries in an organized and repeatable fashion
• Recertification – Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted
• Security Awareness – Builds and maintains company awareness and education programs
• Risk Assessment – Builds and operates the company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity

Knowledge and Experience

• University degree in Information Security, Engineering, MIS, CIS, or related discipline
• 5+ years of relevant work experience