Senior Information Security Compliance Analyst

National Futures AssociationChicago, IllinoisOn-siteFull-timeMid level, 2–5 yearsListed 2 hours ago

Apply now

About this role

NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.

When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.

Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.

What you'll do:

As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:

- Supporting security compliance activities, including evidence collection, control validation and audit preparation.

- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.

- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.

- Maintaining risk registers, issue logs and remediation tracking processes.

- Supporting internal and external audits by providing testing results, evidence and compliance documentation.

- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.

- Preparing reports, dashboards and presentations for security leadership and stakeholders.

- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.

What we're looking for:

We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.

- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience

- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline

- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar

- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts

- Knowledge of governance, risk and compliance concepts and processes

- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools

- Experience with ServiceNow or similar workflow and ticketing platforms preferred

- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred

The salary range for this position is $112,400 to $159,600.

Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct .

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association