What are the responsibilities and job description for the Information Security Specialist - Flexible Hybrid (Chicago, IL, Lenexa, KS or London) position at Cboe Global Markets, Inc.?
Description
Building trusted markets — powered by our people.
At Cboe, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world.
We’re building inclusive ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. Our Associate Resource Groups champion diversity, equity and inclusion, giving employees a safe space to network, share ideas and create opportunities.
Sound like the place for you? Join us!
The Global Cyber Governance Center is hiring for an Information Security Specialist. The Information Security Specialist at Cboe will focus on cyber risks management strategies across the organization. The position requires an individual with an IT and controls-related background, proficiency in security standards, deep understanding of cyber risk management, and the ability to recommend the implementation of robust security controls. The Information Security Specialist will play a critical role in safeguarding our digital assets and ensuring the integrity and security of our information systems. In addition, the Security Specialist will be responsible for assisting in the overall Security Governance efforts and may be required to assist with Internal Audit and external regulatory compliance remediation.
Responsibilities
- Conduct comprehensive risk assessments to identify potential threats and vulnerabilities in the organization’s IT infrastructure, networks, and physical locations.
- Evaluate the effectiveness of existing security measures and recommend improvements.
- Utilize risk assessment methodologies and tools to evaluate security posture.
- Collaborate with IT and other departments to implement effective security controls and measures.
- Develop and maintain security policies, procedures, and guidelines according to industry best practices and regulatory requirements.
- Develop comprehensive security strategies and plans to address identified risks, including preventive, detective, and corrective controls.
- Conduct regular security controls testing to identify weaknesses in current security systems and procedures and recommend improvements.
- Prepare and present regular reports on the organization’s cyber risk posture to senior management.
- Ensure compliance with relevant industry standards and regulations (e.g., DORA, CFTC, Reg-SCI, etc.).
- Assist with regulatory exams by obtaining documentation, drafting responses to regulator inquiries, and helping develop security action plans.
- Stay current with the latest cybersecurity trends, threats, and technologies, and provide recommendations for improvement.
Qualifications
Benefits and Perks
We value the total wellbeing of our people – including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer :
Some of our employees’ favorite benefits and perks include :
LI-CP2
LI-Hybrid
