Senior Engineer, Information Security GRC

Senior Engineer, Information Security GRC is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company. Information Security (IS) is charged with: Preventing impactful cybersecurity and physical security incidents Maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program Avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within. Role & responsibilities Security Metrics Uses automated and manual processes to produce regular reports communicating the status of the Information Security program Policies and Procedures Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards Recertification Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted Knowledge and Experience University degree in Information Security, Engineering, MIS, CIS, or related discipline or equivalent years of experience required 7+ years of relevant work experience Experience with Systems Administration and/or IP Networking is a plus Experience with Regulatory Compliance Experience in an exchange, trading facility, or financial services is a plus Experience with senior management and board metrics generation and communication is a plus Advanced certifications (for example, the CISSP) are a plus Advanced technical writing and/or communication education and experience Experience with Cloud IAM tools Knowledge of scripting language (such as Python, VB, etc.) Specific Technologies Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization Scripting, regular expressions, string-parsing, light SDLC, and project management NIST Cyber Security Framework, CIS, and GRC Platforms Preferred candidate profile Perks and benefits Senior Engineer, Information Security GRC is part of a team responsible for the global Information Security program. The role would gain exposure to the full suite of businesses and products which underpin the Parent Intercontinental Exchange (ICE) company. Information Security (IS) is charged with: Preventing impactful cybersecurity and physical security incidents Maintaining a reputation with customers, regulators, and key stakeholders as running a best-in-class cybersecurity and physical security program Avoiding negative impact to business agility and growth from cybersecurity and physical security policies and controls Governance, Risk, and Compliance maintain said policies, ensure controls are operating effectively via assessment and attestation, and own the vulnerability management program to identify and correct any problems within. Role & responsibilities Security Metrics Uses automated and manual processes to produce regular reports communicating the status of the Information Security program Policies and Procedures Maintains corporate Information Security policies and departmental procedures and maps them to relevant control standards Recertification Operates periodic processes to ensure hire, transfer, and termination protocols are complied with and regular access reviews are conducted Knowledge and Experience University degree in Information Security, Engineering, MIS, CIS, or related discipline or equivalent years of experience required 7+ years of relevant work experience Experience with Systems Administration and/or IP Networking is a plus Experience with Regulatory Compliance Experience in an exchange, trading facility, or financial services is a plus Experience with senior management and board metrics generation and communication is a plus Advanced certifications (for example, the CISSP) are a plus Advanced technical writing and/or communication education and experience Experience with Cloud IAM tools Knowledge of scripting language (such as Python, VB, etc.) Specific Technologies Excel, Workflow automation tools, Data collection, normalization, indexing, correlation, and visualization Scripting, regular expressions, string-parsing, light SDLC, and project management NIST Cyber Security Framework, CIS, and GRC Platforms Preferred candidate profile Perks and benefits