{"id":2441906,"url":"https://alion.io/job/cme-group-it-compliance-controls-analyst-ii","title":"IT Compliance & Controls Analyst II","company":{"id":33863,"name":"CME Group","domain":"cmegroup.com","url":"https://alion.io/company/cmegroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":21000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":6902},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CyberArk","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Python","optional":false},{"name":"EU AI Act","optional":true},{"name":"ISO 27001","optional":true},{"name":"ISO 42001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-13T12:20:22Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-11-05T23:12:09Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Description\nThe IT Compliance/Controls Analyst II is a pivotal role within the Global Information Security (GIS) department, dedicated to advancing IT governance and managing organizational risk. This position ensures the robust implementation and operational effectiveness of critical IT controls. A primary focus is maintaining rigorous compliance with key global regulatory and assurance obligations, including but not limited to CFTC, SEC, Fedline Assurance, and SWIFT CSP, for independent effective challenge and minimize corporate risk. The incumbent will conduct comprehensive security risk assessments, with a specialized emphasis on evaluating AI/ML deployments and frontier model concepts. Furthermore, the role involves driving automated AI-based risk and compliance initiatives to keep the organization at the forefront of technological and process evolution.\nPrimary Accountabilities\nInternalize and contribute to the strategic goals of the CME Group Technology Compliance Team.\n\nMaintain expert knowledge of the company’s IT infrastructure, applications, and governance standards.\n\nExecute control assessments to verify the adequacy of internal controls and adherence to corporate policies.\n\nConduct comprehensive security risk assessments to preemptively address audit findings and reduce risk.\n\nEvaluate security risks associated with AI/ML deployments and emerging frontier model technologies.\n\nLead forward-looking AI-driven risk initiatives to ensure continuous alignment with regulatory advancements.\n\nDesign and implement Python-based control automation pipelines, integrating with enterprise APIs (Archer GRC, CyberArk, AD, HashiCorp Vault) for programmatic evidence validation.\n\nEnsure strict compliance with regulatory obligations, including CFTC, Fedline, and SWIFT CSP frameworks.\n\nProduce detailed, logical work-papers documenting testing procedures, results, and expert conclusions.\n\nStreamline control testing and risk processes utilizing automation and AI tools (e.g., Python, Gemini).\n\nFoster collaborative relationships with stakeholders to enhance the efficiency of the controls testing program.\n\nKey responsibilities include\nTest internal technology controls in alignment with global regulatory requirements.\n\nDevelop and recommend strategic remediation plans for identified control gaps.\n\nIdentify opportunities for automation within IT control and risk assessment workflows.\n\nProvide regular status reporting and assist in the development of performance metrics for senior leadership.\n\nPartner with senior team members to advise management on strengthening controls and mitigating risks.\n\nAssess existing controls against evolving industry best practices and legal obligations.\n\nExecute standard lifecycle security risk assessments across diverse technical domains.\n\nProactively identify and mitigate risks associated with emerging AI/ML technologies and frontier models.\n\nSupport the establishment and refinement of compliance frameworks for AI applications.\n\nMaintain strict alignment with global regulatory standards in all remediation and testing activities.\n\nThe incumbent will collaborate with key partners such as IT Control Owners, Corporate Compliance, Business Process Owners and Global Assurance (i.e. Internal Audit) with supporting and establishing new approaches or changes in existing processes around documented requirements for mitigation of associated risks. Given the current control environment, precedents will need to be established to determine how to properly respond, leveraging defined controls but continuing to establish a policy reflecting a culture of compliance.\nQualifications\nBachelor’s degree in Computer Science, Information Systems, Finance, or a related technical field.\n\n2+ years of experience in IT audit, risk advisory, or information security within a financial or professional services firm.\n\nProfessional certification highly desirable (CISA, CISSP, CRISC, or ISO 27001).\n\nExperience in technical aspects of IT Risk Management, Information Security, Technical Privacy, and/or IT Audits\n\nWorking Knowledge in technologies and environments leveraging operational knowledge of Information Security best practices and industry standards to define the security controls and processes\n\nExperience as an Information Security analyst in a professional services firm or large enterprise, which includes interfacing with key control stakeholders, and participating in the planning and execution of projects in one or more of the following areas - Information Security, Risk Management, Technical Compliance, IT Security Audit, Remediation, and / or IT Risk Management (or) Experience in one or more Technology areas like Information Security, Software Development, IT Architecture, RPA, Data Analytics, etc. with a willingness to move to an IT audit role.\n\nProficiency in Python-based automation for continuous control monitoring and data analysis.\n\nAbility to recommend and implement automation solutions to enhance efficiency and effectiveness of compliance controls.\n\nFamiliarity with AI governance frameworks (e.g., ISO 42001, EU AI Act) and best practices.\n\nAbility to participate in key team discussions and meetings; preparing concise, accurate documents and balancing project deadlines with the occurrence of unanticipated issues.\n\nPossess strong written and verbal communication skills/presentation skills, and ability to work with diverse teams\n\nDemonstrate thorough abilities as a team player; creating a positive environment while meeting project expectations and respecting the work-life quality of team members, providing candid, meaningful feedback in a timely manner, and keeping leadership informed of progress and issues.\n\nInterfacing with key stakeholders on control solutions. Participating in planning and execution of projects in: Information Security, Risk Management, Technical Privacy/Compliance, IT Security Audit, and / or IT Risk Management.\n\nKnowledge of industry frameworks such as NIST, COBIT, CFTC, and SOC2.\n\nExperience working with CAATs/data analytics tools and technologies such as Cloud, DevOps, Microservices, etc.\n\nProficient usage of Governance, Risk and Compliance (GRC) & Audit tools\n\nCME Group: Where Futures are Made\nCME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.\nAt CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.\nImportant Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.","description_format":"text","description_chars":7249,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Stock Exchanges & Market Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-13T12:20:22Z"}],"visa":[],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.858,"p_room":0.75,"age_days":22,"expected_fill_days":31,"reasons":["conf:4","velocity","win:late"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/cme-group-it-compliance-controls-analyst-ii","json_url":"https://alion.io/job/cme-group-it-compliance-controls-analyst-ii.json","meta":{"generated_at":"2026-11-06T05:03:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8799,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":33863},"rest":"https://alion.io/mcp/rest/get_company?id=33863"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcme-group-it-compliance-controls-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcme-group-it-compliance-controls-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcme-group-it-compliance-controls-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cme-group-it-compliance-controls-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcme-group-it-compliance-controls-analyst-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2441906}},{"tool":"search_jobs","arguments":{"company":"cmegroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2441906},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}