Associate Principal, Security Assurance (Cybersecurity)

Location: Chicago, Illinois, United States; hybrid work environment with up to 2 days per week of remote work.

Salary: $116,100–$158,300 per year. Annual discretionary incentive target: 8%–15%.

Company

hirify.global is a systemically important financial market utility providing clearing and settlement services for options, futures, securities lending transactions, exchanges, and trading platforms.

What you will do

• Conduct security risk assessments of third parties, technologies, new technology onboarding requests, and proof-of-concepts.
• Collaborate with Security Engineering, Technology Integration, and Threat Intelligence teams to assess risks and define security requirements.
• Oversee the Security Observation Risk Tracking process, including risk ratings, communication with risk owners, and observation lifecycle management.
• Review configuration monitoring and CIS Benchmark compliance for Windows and Linux platforms, new asset builds, and operating system base images.
• Prepare monthly security risk metrics and reporting materials for executive and Board audiences.
• Review risk intake, risk action plans, risk acceptances, remediation activities, and audit, compliance, and regulatory findings.

Requirements

• At least 5 years of hands-on Information Security experience, preferably in Compliance, Audit, Risk Management, or Security.
• Strong understanding of information technology, security risk management, analytics, and complex risk assessment modeling.
• Advanced knowledge of frameworks and standards including COBIT, NIST 800-53, NIST CSF, and ISO.
• Experience with regulatory frameworks relevant to hirify.global, including Reg SCI and CFTC 99.18.
• Experience with ServiceNow, Tableau, Archer GRC, Jira, and Confluence.
• This position is not eligible for visa sponsorship. A bachelor's degree in Computer Science, Management Information Systems, Statistics and Quantitative Modeling, or Mathematics is a plus, or equivalent relevant experience.

Nice to have

• GIAC, CISSP, CISA, CISM, CRISC, or AWS cloud computing certification.
• Experience transferring technical and risk management knowledge to Security Analysts.

Culture & Benefits

• Collaborative and supportive work environment focused on work-life balance and employee wellness.
• Tuition reimbursement and student loan repayment assistance.
• Technology stipend for remote work.
• Generous paid time off and parental leave.
• 401(k) employer match and medical, dental, and vision benefits.

Hiring process

• Apply through the hirify.global careers site and attach a resume.
• Receive an email confirmation after the application is submitted.
• If selected for an interview, an hirify.global representative will arrange the date, time, and location.