Vulnerability Governance Analyst I

  • CME
  • 15/09/2021
Full time Information Technology Telecommunications

Job Description

Description
CME Group is the world's leading and most diverse derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career shaping tomorrow. We invest in your success and you own it, all while working alongside a team of leading experts who inspire you in ways big and small. Joining our company gives you the opportunity to make a difference in global financial markets every day, whether you work on our industry-leading technology and risk management services, our benchmark products or in a corporate services area that helps us serve our customers better. We're small enough for you and your contributions to be known. But big enough for your ideas to make an impact. The pace is dynamic, the work is unlike any other firm in the business, and the possibilities are endless. Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more.

To learn more about what a career at CME Group can offer you, visit us at .

This is a perfect opportunity for the right person to become a key part of a team of global information security professionals that are executing a pivotal role in protecting and defending the CME's critical infrastructure. This role will assist in the oversight of the CME's vulnerability management program to ensure all related processes are being executed according to established procedures. This candidate will be a key participant in the design, assessment and execution of vulnerability governance measurements, metrics and analysis.
Position Responsibilities
  • Assist with the design and execution of vulnerability management program oversight measures, dashboards and advanced metrics across a wide variety of assets and applications
  • Assess results of measures and metrics to identify risk across critical areas of the vulnerability management program
  • Identify risk areas to include in the oversight program, as well as identify the most effective methods of presenting audit results
  • Work with IT teams to resolve risk items
  • Identify and track CME virtual perimeters to ensure vulnerability scanning accuracy
  • Research new developments in vulnerability governance oversight
  • Perform a variety of other tasks and projects, as needed, as part of the vulnerability governance team

Experience Requirements
  • Prior training or experience in a formal information security environment or vulnerability management program is a plus.
  • An associate or bachelor's degree is preferred
  • The desire and ability to accurately work with numbers, metrics and spreadsheets on a full-time basis
  • The ability to produce professional-level charts and presentations
  • The ability to communicate effectively with all levels of employees

Minimum Education/Experience Requirements
  • Experience working full-time in an office setting.
  • In-depth experience using advanced MS Excel spreadsheets, tables and charts, MS Word, Visio, PowerPoint
  • Experience with Jira and/or Archer a plus
  • Excellent communications skills in English
  • Ability to quickly grasp complex technical concepts and work with multiple ongoing projects simultaneously

For EU Residents, the Candidate Privacy Policy can be found here.