Explore
Close
Your acceptance of all cookies will permit robust site functionality. If you don't allow cookies, some features and functionality of OCC's site may not operate as expected. If you do not choose either cookie setting for our site, or if you close this window, this message will continue to display on each page you visit. Cookie settings can be controlled in your Internet browser to automatically reject some forms of cookies. For more details on cookies this site uses, see our OCC Site Cookies page. In addition to using cookies, we retain other information, including your Internet Protocol (IP) address, for the purposes listed in the Privacy Policy.

Associate Principal, Platform Security

Summary

Support the architecture, design and governance of a secure infrastructure ecosystem, focused on automation and proactive IaaS security best practices in collaboration with the Security Services and CEP team.  Lead the process of architecting cloud security technologies, native AWS monitoring and auditing services, and improved cloud security governance and control.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

  • Collaborate with development, operations and infrastructure teams to analyse Platform/Security change control Processes, Controls and Guardrails à Support Director in defining areas for improvement and strategic roadmaps
  • Coordinate and support Platform team with security observation remediation
  • Work to reduce cycle time on remediating security observations within platform automation team, and eventually additional cloud and enterprise platform teams
  • Support automation for incident response and to prevent problem recurrence
  • Assess the production security readiness of services we plan to deploy
  • Define and track operational metrics for departmental work on security issues
  • Architect and support operationalization of shared security services and tools to improve automated monitoring capabilities (AWS Security Hub, Config, Inspector, Guard Duty, Audit Manager, etc.)
  • Contribute to the team’s continuous improvement through research, retrospectives, discussion groups and roadmaps
  • Provide leadership within the team by guiding and mentoring junior members, and preparing stories

Supervisory Responsibilities:

  • None

Qualifications:

The requirements listed are representative of the knowledge, skill, and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

  • Experience with managing and operating large-scale systems
  • Experience with Agile / Scrum methodology
  • Able to succeed in fast-paced environment with frequent changes
  • Comfortable communicating with both technical and non-technical audiences
  • Comfortable mentoring/leading resources informally (scrum)
  • Strong documentation skills
  • Analytical problem-solving approach
  • Self-starter – takes the initiative to research, learn and deliver. Anticipates the play.
  • Team player – humble, collaborative, and focused on making sure the entire team succeeds

Technical Skills: (preferred/required)

  • Required: Experience managing infrastructure on prem and in public cloud environments like AWS (preferred), Azure or GCP
  • Required: Experience providing visibility using monitoring and alerting tools like Splunk
  • Required: Background in IT-Security/Risk/Governance, controls
  • Preferred: AWS Cloud Practitioner, Solution Architect certification etc.
  • Preferred: Experience with NIST-CSF, COBIT control families
  • Preferred: Experience with Terraform and Infrastructure as Code
  • Preferred: Experience with using Continuous Integration and Continuous Delivery (CI/CD) tools like Jenkins, Travis, Harness, Spinnaker, Appveyor, CodeBuild or CodePipeline.

Education and/or Experience:

  • Bachelor’s or Master’s Degrees in Computer Science, Information Systems or other related field.  Or equivalent work experience.
  • Minimum of 5-8 years of experience in Security/IT Risk/Governance or related field

Certificates or Licenses:

  • Preferred: AWS Cloud Practitioner certification
  • Preferred: AWS Solution Architect (associate) certification

Step 1
When you find a position you're interested in, click the 'Apply' button. Please complete the application and attach your resume.  

Step 2
You will receive an email notification to confirm that we've received your application.

Step 3
If you are called in for an interview, a representative from OCC will contact you to set up a date, time, and location. 

For more information about OCC, please click here.

OCC is an Equal Opportunity Employer

Apply About OCC
  • REQ-2034
  • Chicago - 125 S Franklin
  • Full Time Regular
  • Posted: May. 26, 2021

How to Apply

Step 1 - When you find a position you're interested in, click the 'Apply' button. Please complete the application and attach your resume.

Step 2 - You will receive an email notification to confirm that we've received your application.

Step 3 - If you are called in for an interview, a representative from OCC will contact you to set up a date, time, and location.

OCC is an Equal Opportunity Employer

Numerous studies have shown that people from groups that are traditionally under-represented in financial services apply to jobs only if they believe they meet 100% of the requirements. We want to break down this mindset to further diversify our workforce.

We encourage you to review our open positions and apply if you think your experience may be a match, even if you do not meet all of the qualifications. Your perspective may be an element we need to continue building innovative solutions to support the markets and market participants we serve.

OCC is a globally recognized entity that clears a multitude of diverse and sophisticated products. We want to reflect this in the diversity of our workforce.

This web site discusses exchange-traded options issued by The Options Clearing Corporation. No statement in this web site is to be construed as an endorsement, recommendation or solicitation to purchase or sell a security, or to provide investment advice. Options involve risk and are not suitable for all investors. Prior to buying or selling an option, a person must receive a copy of the disclosure document, Characteristics and Risks of Standardized Options. Individuals should not enter into option transactions until they have read and understood this document. To obtain copies, contact your broker, any exchange on which options are traded, or The Options Clearing Corporation, 125 S. Franklin Street, Suite 1200, Chicago, IL 60606 ([email protected]).