Senior Security Governance Analyst

Job Description:

Building trusted markets — powered by our people At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world. We’re building meaningful ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader.

Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. We strive to provide employees a safe space to network, share ideas and create opportunities.

To support strong partnership and team connection, this role follows a four day in office work model.

Location Overview Cboe Global Markets operates a key office in the Overland Park Xchange (OPx), located in Overland Park, Kansas, a bustling suburb of Kansas City. The OPx business park is strategically positioned to provide convenient access to the Kansas City metropolitan area, offering modern infrastructure and a collaborative environment ideal for the financial services and technology industries. This location benefits from proximity to major highways, making it easily accessible for employees

The OPx site provides a balance of high-quality office space, advanced facilities, and an environment conducive to productivity and growth.

Role Overview Cboe’s Cyber Governance team is hiring a Senior Specialist, Information Security Governance. The Senior Information Security Specialist is responsible for supporting enterprise-wide cyber risk management and governance activities. This role requires strong knowledge in information technology and internal controls, along with security frameworks and good experience of cybersecurity risk management practices. The individual will collaborate across global teams to assess risks, recommend and implement robust security controls, and contribute to the development and maintenance of information security policies and  this role, the Senior Information Security Specialist will also coordinate both local and global regulatory compliance efforts, including identifying control gaps and overseeing risk remediation activities.

Additionally, the position plays a key role in enhancing the efficiency and effectiveness of security processes through standardization, consistency, and continuous improvement initiatives.

This role contributes to the broader mission of the Information Security function by helping protect the organization’s people, assets, and reputation through strong governance, optimized controls, and scalable security practices, under the three-lines-of-defense model.

Your responsibilities will be:

Conduct assurance and governance activities related to organization-specific security compliance methodologies that demonstrate our security governance to management and other key stakeholders including regulators, auditors, and boards.

Develop and maintain security policies, procedures, and guidelines according to industry best practices and regulatory requirements.

Conduct comprehensive security risk assessments to identify potential risks in the organization’s IT infrastructure and oversee the lifecycle of any security risks, ensuring that remediation is agreed, effective, and timely.

Lead security controls testing and maintain governance of the control library, evaluating the effectiveness of existing security controls and…