We clear and settle trades for the options industry.
Chicago, IL

Associate Principal, Security Governance

| Chicago
Apply Now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.


All OCC employees are required to disclose their COVID-19 vaccination status to OCC’s Human Resources department, and provide acceptable proof of vaccination status, as applicable. In addition, OCC requires employees who enter one of its offices to be fully vaccinated against COVID-19 or submit to regular testing as a condition of employment, subject to reasonable accommodation.

Who We Are

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.

What We Offer

A highly collaborative and supportive environment developed to encourage work-life balance and employee wellness. Some of these components include:

A hybrid work environment, up to 3 days per week of remote work

Tuition Reimbursement to support your continued education

Student Loan Repayment Assistance

Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely

Generous PTO and Parental leave

Competitive health benefits including medical, dental and vision

What You'll Do

The Associate Principal, Security Governance (reporting to the Director Security Governance) supports the Security Services Department and will regularly liaise with, Compliance, Enterprise Risk Management, Internal Audit and OCC’s Regulators. This person is responsible for driving information security initiatives related to regulatory exam and Internal Audit remediation planning, tracking, and mitigation. Additionally, this role will lead the development, review and publication of policy, procedures and controls for the Security Services Department in support of the NIST Cyber Security Framework. Likewise, this role will facilitate the management self-testing efforts for the Security Service Department by identifying, recommending, and driving enhancements to the performance, integrity, and compliance of the organization’s processes. 

This role will also focus on compliance with applicable regulatory and legal rules and requirements (i.e. SEC-Regulation SCI, CFTC-System Safeguards, etc.) as they relate to information security.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

  • Responsibilities include the development, review and continuous improvement of the Security Services Department policies, procedures, and controls to enhance OCC’s risk control environment
  • Recommendation of appropriate reporting frameworks, standards and best practices.
  • Assist with remediating regulatory and Internal Audit findings, including collecting data to identify root cause of problems, identifying trends, formulating solutions, and escalating potential issues related to the lifecycle of remediation activities including, but not limited to:
    • Management responses
    • Development of appropriate action plans
    • Delivery timeline tracking
    • Gathering, and review of appropriate evidence artifacts
    • Proving feedback to responsible SME’s regarding appropriateness of evidence artifacts
    • Development of documentation for closure
  • Act as supporting point of contact from Security Services to senior management in Compliance, Internal Audit, Enterprise Risk Management, Legal and the Enterprise Project Management Office.
  • Lead development, implementation, review and improvement of right sized management self-testing of controls.
  • Lead Information Security Cyber Security Working Group Program efforts.
  • Act on Security Services behalf related to compliance matters including developing and implementing strategies for strengthening the Security Services compliance posture
  • Manage Security Services responses to Third-Party requests and surveys
  • Perform ad-hoc duties for Security Governance management as necessary

Supervisory Responsibilities:

  • N/A


The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

  • Broad knowledge of applicable regulatory, legal rules and requirements (e.g., SEC, CFTC, Federal Reserve Board, etc.) as they pertain to Information Security.
  • Sound knowledge of and experience working with Security and Technology authoritative industry standards and control framework s (e.g. NIST CSF, NIST 800-53, CIS 20, COBIT, COSO, ITIL, ISO 27001, CSA CCM, etc.)
  • Strong understanding of information technology and risk management concepts
  • Strong experience in Information Security related policy, procedure and control writing.
  • Basic knowledge of Cloud implementation and Cloud compliance strategies including for data, information, application, platform and network security
  • Understanding of Systems Development Life Cycle (SDLC) process (Agile) and Secure Software Development Lifecycle.
  • Ability to work independently and as a member of a team, proficient in collaborating with internal business clients from different departments and at various levels of seniority.
  • Proficient in gathering, analyzing, and evaluating facts and preparing/presenting concise oral and written Compliance related data analysis and reports.
  • Excellent organizational, written and oral communication skills.

Technical Skills:

  • Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint
  • Experience using an integrated risk management system (such as RSA Archer Suite) a plus
  • Business Intelligence tool experience (i.e. Tableau), a plus

Education and/or Experience:

  • Bachelor Degree - Computer Science, Management Information Systems, or related field or the equivalent combination of education and/or relevant experience.

  • 5 or more years hands-on Information Security or EGRC-related work experience.

  • Previous work in Compliance, Audit, Risk Management, Project Management or control activities in the financial services industry.

Certificates or Licenses:

  • Professional network and/or security certifications a plus (i.e., GIAC, CISSP, CISA, CISM, CRISC)

See More
Apply Now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.

Where we are

Adjacent to the Willis Tower, close to CTA, Metra and expressways with plenty of food and entertainment options nearby.

Technology we use

  • Engineering
    • .NETLanguages
    • AWS (Amazon Web Services)Languages
    • C#Languages
    • C++Languages
    • JavaLanguages
    • JavascriptLanguages
    • PerlLanguages
    • PythonLanguages
    • RLanguages
    • RubyLanguages
    • ScalaLanguages
    • SqlLanguages
    • SwiftLanguages
    • ReactLibraries
    • AngularJSFrameworks
    • Ruby on RailsFrameworks
    • SpringFrameworks
    • Microsoft SQL ServerDatabases

What are OCC Perks + Benefits

OCC Benefits Overview

Educational Assistance and Student Debt Forgiveness, 12-week paid parental leave, technology stipend up to $2,000, mobile data reimbursement of $35 per month. Open offices, online health coaching.

Volunteer in local community
Each year, OCC employees select a locally-based charitable organization for each of our three offices (Chicago, Dallas and Washington, D.C.). We offer multiple opportunities to get involved.
Partners with Nonprofits
OCC Partners with local organizations in Dallas, Chicago and DC to raise funds and support their missions. Employees select the charity and are eligible for up to 8 hours of paid time to volunteer.
Friends outside of work
Daily sync
Open door policy
Team owned deliverables
Team based strategic planning
Open office floor plan
Dedicated Diversity/Inclusion Staff
Unconscious bias training
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability Insurance
Dental Benefits
Vision Benefits
Health Insurance Benefits
Life Insurance
Wellness Programs
Mental Health Benefits
Retirement & Stock Options Benefits
401(K) Matching
OCC provides employees with a 401(k) matching plan managed by Fidelity. We match 50% of contributions up to 6% of an employee's annual gross pay.
Performance Bonus
Match charitable contributions
Child Care & Parental Leave Benefits
Flexible Work Schedule
OCC provides employees with a flexible work schedule that includes Flexible start and end times.
Vacation & Time Off Benefits
Generous PTO
OCC employees receive between 22 and 32 days per year of paid time off based on years of service.
Paid Volunteer Time
Eligible employees get 30 days of paid sabbatical after their first 10 years of working at the company.
Paid Holidays
Paid Sick Days
Perks & Discounts
Casual Dress
Commuter Benefits
OCC Offers pre-tax commuter benefits for employees in Chicago and Washington, D.C.
Happy Hours
Relocation Assistance
OCC offers relocation assistance which varies based on the position level and location.
Professional Development Benefits
Job Training & Conferences
OCC offers employees professional development opportunities including onsite training courses and the ability to attend job related certification courses, conferences and seminars.
Tuition Reimbursement
Our tuition reimbursement plan offers an annual max of $1000.
Lunch and learns
OCC hosts leadership lunches on a regular basis so you can learn about your colleagues and their unique backgrounds.
Cross functional training encouraged
Promote from within
Online course subscriptions available
Customized development tracks
Paid industry certifications
Employees are strongly encouraged to stay current in relevant technologies and supports certification programs.

Additional Perks + Benefits

We were just recognized as a best place to work for working parents! Take a look at our blog post here: https://www.theocc.com/Newsroom/Views/2021/04-26-OCC-Designated-as-Best…

An Insider's view of OCC

What are some social events your company does?

Monthly happy hours and cultural celebrations to honor our diverse workforce.


Executive Director, Talent Acquisition

More Jobs at OCC