Senior Engineer, Information Security GRC

Job Purpose The Senior Engineer, Information Security, GRC is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent ICE company.

Responsibilities

• Preventing impactful cybersecurity and physical security incidents, maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program, and avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls.
• Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within.
• Security Metrics – Uses automated and manual processes to produce regular reports communicating the status of the Information Security program
• Policies and Procedures – Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards
• Regulator, Audit, and Customer Inquiries – Organizes and updates departmental documentation and responds to inquiries in an organized and repeatable fashion
• Recertification – Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted
• Awareness – Builds and maintains company awareness and education programs
• Risk Assessment – Builds and operates the company platform to document, measure, and report assessments, risks, controls, findings, and remediation activity

Requirements

• Knowledge and Experience University degree in Information Security, Engineering, MIS, CIS, or related discipline 5+ years of relevant work experience Experience with Systems Administration and/or IP Networking is a plus 5 or more years of experience with Regulatory and/or
• Framework Compliance Experience in an exchange, trading facility, or financial services a plus Experience in Customer communication and Vendor evaluation Experience with senior management and board metrics generation and communication
• Scripting, regular expressions, string-parsing, light SDLC, and project management.

Preferred

• Advanced certifications (for example, the CISSP) Advanced technical writing and/or communication education and experience
• Specific Technologies Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization.

NIST Cyber Security Framework, CIS, and GRC Platforms. ---------- Intercontinental Exchange, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to legally protected characteristics.