Associate Principal, Security Business Operations
COVID-19
All OCC employees are required to disclose their COVID-19 vaccination status to OCC’s Human Resources department, and provide acceptable proof of vaccination status, as applicable. In addition, OCC requires employees who enter one of its offices to be fully vaccinated against COVID-19 or submit to regular testing as a condition of employment, subject to reasonable accommodation.
Who We Are
The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.
What We Offer
A highly collaborative and supportive environment developed to encourage work-life balance and employee wellness. Some of these components include:
A hybrid work environment, up to 3 days per week of remote work
Tuition Reimbursement to support your continued education
Student Loan Repayment Assistance
Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely
Generous PTO and Parental leave
Competitive health benefits including medical, dental and vision
What You’ll Do
This role is of a niche business analyst with a focus on Open source libraries and APIs. This role would also work with the product owner to build out and administer the security training program for developers. This role will also be a Product Owner to the Kanban team building remediations for the open source library remediations.
Primary Duties and Responsibilities:
To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.
- OCC is seeking an individual who would be responsible for discovering, synthesizing, and analyzing information from a variety of internal and external sources, including tools, processes, documentation, and stakeholders. The ideal candidate is a proven change agent that demonstrates the ability to solve complex problems through logical, digestible solutions that deliver key value to our stakeholders. Additionally, this individual must be comfortable communicating to all levels of the organization as well as inside and outside the organization. Skills that are foundational to the success of this role include, but are not limited to, communication, analytical, problem solving, process modelling, facilitation, elicitation, scope management, leadership and agile mindset
- Act as a partner to both the business and the technology teams.
- Act as a Product Owner of a Kanban team for remediation of open source library vulnerabilities
- Identify scope gaps and missing requirements by acquiring an in depth understanding of current state (i.e., legacy system) and future state.
- Lead the roll out and maintenance of the Veracode Labs program working closely with the application security team
- Identify product team dependencies and plan for resolution.
- Prepare for and lead requirement workshop discussions with vendor, stakeholders and product owners.
- Lead requirement review sessions with product owners and stakeholders to verify the completeness and adequacy of requirements and use cases; assist in the development of acceptance criteria.
- Support or develop test plans and test cases; participate in test results verification.
- Participate in the final UAT following product deployment.
- Assist in building cross-team collaboration and define acceptance criteria for integrated components.
- Adhere to analysis best practices for epics and user stories.
- Perform requirements analysis, story decomposition, system integration analysis, and data flow design.
- Regularly engage in agile activities including sprint planning and backlog grooming. Act as an advisor to the Product owner regarding next steps and approvals.
- Build high quality user stories and acceptance criteria; work with scrum team to refine user stories.
- Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
- Helping outline the criteria for baseline assessments to be applied when reviewing system security compliance
Supervisory Responsibilities:
N/A
Qualifications:
The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.
Bachelor’s degree required. MBA/MS is a plus.
CCBA, CBAP, and/or AAC certification is a plus.
Around 7 to 11 years experience in technical business analysis
Experience with or exposure to Agile and software development.
Preferred business experience in security practices and activities.
Understanding and knowledge of security vulnerabilities and remediation actions
Self-motivated and self-starting; working with little supervision and picking up new and unfamiliar concepts.
Experience using Confluence and Jira.
Experience of product owner of small teams (Kanban and Scrum)
Experience with process modeling tools such as Visio.
Knowledge and/or vested interest in security tools such Black Duck, Veracode, Code DX
Knowledge and/or vested interest in cloud technologies; experience working with AWS.
Technical Skills:
Experience using Confluence and Jira.
Experience with process modeling tools such as Visio.
Knowledge and/or vested interest in security tools such Black Duck, Veracode, Code DX
Knowledge and/or vested interest in cloud technologies; experience working with AWS.
Education and/or Experience:
Bachelor’s degree required. MBA/MS is a plus
Certificates or Licenses:
CCBA, CBAP, and/or AAC certification is a plus.
Product Owner certification a plus