Associate Principal, Security Assurance

What You’ll Do

The Associate Principal, Security Assurance is responsible for conducting various security assessments, collaborating with other Security teams to assess risk and requirements for new technology onboarding and PoCs, performing third‑party security assessments to support OCC’s Third Party Risk Management team, assisting with oversight of the Security Observation Risk Tracking process, and special risk assessments as requested by Security leadership. The role also supports other Security Assurance team members in developing these various risk assessments.

• Assisting with oversight of configuration monitoring for CIS Benchmark control compliance on Windows/Linux platforms, including new asset builds.
• Preparing monthly reporting metrics and materials for Security Assurance processes.
• Managing team request intake.
• Reviewing risk observations, risk action plans, and risk acceptances from Operational Risk Management processes.

• Conduct security risk assessments of OCC third parties and technologies.
• Collaborate with Security Engineering & Technology Integration and Threat Intelligence teams to assess risk and set security requirements for new technology onboarding and PoCs.
• Assist with oversight of the Security Observation Risk Tracking process, including processing security observations, assessing risk ratings, communicating observations to risk owners, and managing the observation lifecycle.
• Participate in Security review and oversight of configuration monitoring process for Windows and Linux platforms, including review of compliance reports for new asset builds and operating system base images.
• Review and approve Linux server privilege elevation requests.
• Prepare monthly reporting metrics and materials related to the Security Observation Risk Tracking process for inclusion with other reporting targeted at executive and Board audiences.
• Assist with team request intake, such as reviewing new technology requests for risk assessment applicability.
• Participate in Security review and approval of Risk Intake, Risk Action Plan, and Risk Acceptance records managed by the Operational Risk Management & Controls team.
• Assist with other Security Assurance Program efforts, including but not limited to tracking remediation and validation of audit, compliance, and regulatory findings as needed.
• Assist Security Analysts by transferring technical and risk management knowledge.
• Perform other duties as assigned.

None

• Effective oral and written communication, analytical judgement, and collaboration skills.
• Analytical skills to successfully model and present complex risk assessments.
• Ability to work independently and effectively with local and remote OCC staff, management, vendors, and consultants while exercising sound judgement.
• Strong understanding of information technology, risk management concepts, and analytics.
• Possesses critical OCC values (fact based, collaborative, credibility/trust and judgement).

• Advanced understanding of information related frameworks and standards such as COBIT, NIST 800‑53, NIST CSF, ISO, etc.
• Experience in security risk management principles and practices.
• Experience with regulatory frameworks and requirements relevant to OCC such as Reg SCI, CFTC 99.18, etc.
• Experience working in Service Now, Tableau, Archer GRC, Jira, and Confluence.

• 5 years hands‑on Information Security experience, preferably within previous work in Compliance, Audit, Risk Management, or Security.
• Bachelor’s degree in Computer Science, Management Information Systems, Statistics & Quantitative Modeling, Mathematics, or an equivalent combination of education and/or relevant experience.

• Professional network and/or security certifications are a plus, but not required (e.g., GIAC, CISSP, CISA, CISM, CRISC, AWS cloud computing).

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for…