IT Compliance & Controls Analyst II

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Finance, or a related technical field.
• 2+ years of experience in IT audit, risk advisory, or information security within a financial or professional services firm.
• Professional certification highly desirable (CISA, CISSP, CRISC, or ISO 27001).
• Experience in technical aspects of IT Risk Management, Information Security, Technical Privacy, and/or IT Audits
• Working Knowledge in technologies and environments leveraging operational knowledge of Information Security best practices and industry standards to define the security controls and processes
• Experience as an Information Security analyst in a professional services firm or large enterprise, which includes interfacing with key control stakeholders, and participating in the planning and execution of projects in one or more of the following areas - Information Security, Risk Management, Technical Compliance, IT Security Audit, Remediation, and / or IT Risk Management (or) Experience in one or more Technology areas like Information Security, Software Development, IT Architecture, RPA, Data Analytics, etc. with a willingness to move to an IT audit role.
• Proficiency in Python-based automation for continuous control monitoring and data analysis.
• Ability to recommend and implement automation solutions to enhance efficiency and effectiveness of compliance controls.
• Familiarity with AI governance frameworks (e.g., ISO 42001, EU AI Act) and best practices.
• Ability to participate in key team discussions and meetings; preparing concise, accurate documents and balancing project deadlines with the occurrence of unanticipated issues.
• Possess strong written and verbal communication skills/presentation skills, and ability to work with diverse teams
• Demonstrate thorough abilities as a team player; creating a positive environment while meeting project expectations and respecting the work-life quality of team members, providing candid, meaningful feedback in a timely manner, and keeping leadership informed of progress and issues.
• Interfacing with key stakeholders on control solutions. Participating in planning and execution of projects in: Information Security, Risk Management, Technical Privacy/Compliance, IT Security Audit, and / or IT Risk Management.
• Knowledge of industry frameworks such as NIST, COBIT, CFTC, and SOC2.
• Experience working with CAATs/data analytics tools and technologies such as Cloud, DevOps, Microservices, etc.
• Proficient usage of Governance, Risk and Compliance (GRC) & Audit tools
• CME Group: Where Futures are Made
• CME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it – all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.
• At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.
• Important Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.