Senior Security GRC Engineer: Drive Compliance and Risk

ICE Clear Europe Limited; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Intercontinental Exchange, Inc. is seeking a Senior Engineer, Information Security, GRC to join the global IS program.

You will work with teams across businesses and products to strengthen cybersecurity, governance, risk, and compliance, while supporting regulatory expectations. The role focuses on security metrics, policy maintenance, audits, access reviews, and communications with senior management and customers.

Qualifications

• 5+ years of relevant work experience.
• Experience with senior management and board metrics generation and communication.
• 5 or more years of experience with Regulatory and/or Framework Compliance.
• Advanced certifications (e.g., CISSP) recommended.
• Experience in Customer communication and Vendor evaluation.
• Advanced technical writing and/or communication education and experience.

Responsibilities

• Security Metrics – produces regular reports on the IS program status.
• Policies and Procedures – maintains IS policies and maps them to control standards.
• Regulator, Audit, and Customer Inquiries – documents and responds to inquiries.
• Recertification – manages hire, transfer, and termination protocols and access reviews.
• Security Awareness – develops and maintains awareness programs.
• Risk Assessment – documents, measures, and reports risks, controls, findings, and remediation.

Skills

5+ years experience

Senior stakeholder communication

Regulatory & framework compliance

Security governance

Education

University degree in Information Security or related field

Tools

NIST CSF & CIS

GRC Platforms

Job description

Intercontinental Exchange, Inc. is seeking a Senior Engineer, Information Security, GRC to join the global IS program.

You will work with teams across businesses and products to strengthen cybersecurity, governance, risk, and compliance, while supporting regulatory expectations. The role focuses on security metrics, policy maintenance, audits, access reviews, and communications with senior management and customers.