Senior Information Security Compliance Analyst

National Futures Association; Chicago (IL); Presencial; USD 112.000 - 160.000; Tempo integral

Resumo da vaga

National Futures Association is seeking a Security Compliance & Risk Manager to strengthen its cybersecurity risk program and support regulatory obligations. You will collaborate with Security Compliance colleagues and stakeholders to identify, assess, and report on cybersecurity risks across the organization.

You'll build and maintain risk registers, support audits, and drive continuous governance improvements while communicating complex concepts to both technical and non-technical audiences.

Qualificações

• Bachelor's degree in cybersecurity or related field or equivalent experience.
• 3–5 years of experience in cybersecurity, IT compliance, risk management, audit preparation or governance.
• Familiarity with security frameworks such as NIST, CIS Controls, ISO 27001 or similar.
• Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts.
• Knowledge of governance, risk and compliance concepts and processes.
• Familiarity with tools like Microsoft Copilot, VS Code, dashboards and automation.
• Experience with ServiceNow or similar workflow and ticketing platforms preferred.
• Relevant certifications such as Security+, CISSP, CISA or CRISC preferred.

Responsabilidades

• Support security compliance activities including evidence collection and control validation.
• Participate in planning and documenting cybersecurity control testing and remediation plans.
• Support the vulnerability management program through remediation tracking.
• Maintain risk registers, issue logs and remediation tracking processes.
• Support audits by providing testing results and compliance documentation.
• Ensure security documentation aligns with requirements and regulatory expectations.
• Prepare reports, dashboards and presentations for leadership and stakeholders.
• Contribute to continuous improvement initiatives in security governance and efficiency.

Conhecimentos

Cybersecurity

Risk management

Governance

Control testing

Audit preparation

Vulnerability management

Security frameworks

Formação

Undergraduate degree in cybersecurity or related field

Ferramentas

ServiceNow

Microsoft Copilot

Visual Studio Code

Dashboards

Automation tools

Descrição da vaga

NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.

When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.

Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.

What You'll Do

As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:

• Supporting security compliance activities, including evidence collection, control validation and audit preparation.
• Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
• Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
• Maintaining risk registers, issue logs and remediation tracking processes.
• Supporting internal and external audits by providing testing results, evidence and compliance documentation.
• Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
• Preparing reports, dashboards and presentations for security leadership and stakeholders.
• Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.

What We’re Looking For

We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work.

• Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
• Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
• Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
• Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
• Knowledge of governance, risk and compliance concepts and processes
• Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
• Experience with ServiceNow or similar workflow and ticketing platforms preferred
• Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred

The salary range for this position is $112,400 to $159,600.

Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association