{"id":2578465,"url":"https://alion.io/job/theocc-associate-principal-internal-audit-information-technology-security","title":"Associate Principal, Internal Audit, Information Technology & Security","company":{"id":1768531,"name":"The Options Clearing Corporation","domain":"theocc.com","url":"https://alion.io/company/theocc-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States","Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":104800,"max":170600,"currency":"USD","period":"year","gross":null,"usd_annual":170600},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Confluence","optional":false},{"name":"CyberArk","optional":false},{"name":"Db2","optional":false},{"name":"GitHub","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST CSF","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-17T20:50:46Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"*****THIS POSITION IS NOT ELIGIBLE FOR VISA SPONSORSHIP*****\nTo be considered for this position, applications and resumes are accepted only through our careers site by directly applying to the posted job. We do not accept unsolicited resumes or sales solicitations from staffing agencies. Any OCC employee wishing to submit a referral must do so through their Workday account. Any resume submitted outside of an active job posting will not be considered for employment.\nWhat You'll Do:\nThis role will support and lead independent assessments of OCC's Information Technology and Security environment, risk management, and other objectives as needed. The role is responsible for determining the sufficiency of management's controls and activities related to the management of regulatory, operational, and strategic risks and presenting recommendations for improvements to the engagement management and the auditee.\nPrimary Duties and Responsibilities:\nTo perform this job successfully, an individual must be able to perform each primary duty satisfactorily.\nResponsibilities will be aligned, but not limited, to three pillars:\nDelivery\nSupport the team on delivery of assigned audits within the annual audit plan. \nSupport the team confirming a professional auditee experience. \nOwning the audit quality, accuracy of results, and delivery in a timely manner.\nProactively identify regulatory, operational, and/or strategic risks to the organization and bring them to your engagement team.\nEvaluate exceptions or inefficient practices for root causes and propose advice and recommendations for achievable solutions.\nLeading audits related to organization changes including business requirements definitions, technology implementations (e.g., change management, security), engagement and alignment of change initiatives to business objectives.\nQuality\nMaintaining an understanding of policies, procedures, standards, and supporting technologies, and educating staff accordingly, to effectively identify potential risks and alternatives to mitigate risk exposure leveraging leading practices.\nAbility to understand professional principles and standards (e.g., AICPA, IIA IPPF, COBIT, NIST CSF) and the relevancy to risk management and impact on policies and procedures. In addition, leveraging these principles and standards to test and evaluate corporate risk management processes and controls.\nKeeping current on best practices and emerging risks within the financial services industry and making recommendations for improvements as necessary.\nLeadership\nSupporting effective relationships with business groups and leadership and partnering with management \nSupervisory Responsibilities:\nNone\nQualifications:\nThe requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.\nQualifications & Experience will be required, but not limited, to:\nAbility to communicate clearly and effectively, both orally and in writing, including the ability to handle potentially sensitive situations and discussions.\nStrong problem solving and analytical capabilities.\nDemonstrated ability to gather, analyze, and evaluate facts, and prepare and present concise oral and written reports.\nAbility to work independently or as part of a team, prioritizing multiple audit assignments to simultaneously complete each in a timely fashion.\nExperience\nExperience working in a complex, fast paced environment.\nExperience using the principles, practices, and techniques involved in conducting audits in accordance with the requirements set forth in the International Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors (IIA).\n[Preferred] Consulting and/or accounting firm experience.\n[Preferred] Experience in Financial Services/Security Industry and working with regulations such as Regulation Systems Compliance and Integrity (Reg SCI).\nTechnical Skills:\n[Required] Microsoft Office applications\n[Preferred] Familiarity with security tools such as: CyberArk, Splunk, SailPoint\n[Preferred] Familiarity with change management tools such as: ServiceNow, Jira, Confluence, GitHub\n[Preferred] Familiarity with databases such as: Oracle, DB2, SQL\n[Preferred] Familiarity with cloud based solutions: AWS, Workday\n[Preferred] Proficiency using Archer or other audit or Governance Risk and Compliance (GRC) software\nEducation and/or Experience:\n[Required] Bachelor’s degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field.\n[Required] 5+ years of experience (audit-related) in conducting risk-based Information Technology and Security audits and projects, cyber security reviews, and internal audits.\nCertificates or Licenses:\n[Preferred] Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent.\nAbout Us\nThe Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.\nBenefits\nA highly collaborative and supportive environment developed to encourage work-life balance and employee wellness. Some of these components include:\nA hybrid work environment, up to 2 days per week of remote work\nTuition Reimbursement to support your continued education\nStudent Loan Repayment Assistance\nTechnology Stipend allowing you to use the device of your choice to connect to our network while working remotely\nGenerous PTO and Parental leave \n401k Employer Match\nCompetitive health benefits including medical, dental and vision\nVisit https://www.theocc.com/careers/thriving-together for more information.\nCompensation\nThe salary range listed for any given position is exclusive of fringe benefits and potential bonuses. If hired at OCC, your final base salary compensation will be determined by factors such as skills, experience and/or education. \nIn addition, we believe in the importance of pay equity and consider internal equity of our current team members as part of any final offer. \nWe typically do not hire at the maximum of the range in order toallow for future and continued salary growth. We also offer a substantial benefits package as noted on www.theocc.com/careers\nAll employees may be eligible for a discretionary bonus. Discretionary bonuses are based on various factors, including, but not limited to, company and individual performance and are not guaranteed.\nSalary Range\n$104,800.00 - $170,600.00Incentive Range\n8% to 15%This position is eligible for an annual discretionary incentive compensation award, for which the target range is listed above (see Incentive Range). The amount of such award, if any, will be based on various factors, including without limitation, both individual and company performance.\nStep 1\nWhen you find a position you're interested in, click the 'Apply' button. Please complete the application and attach your resume.\nStep 2\nYou will receive an email notification to confirm that we've received your application.\nStep 3\nIf you are called in for an interview, a representative from OCC will contact you to set up a date, time, and location.\nFor more information aboutOCC, please clickhere.\nOCC is an Equal Opportunity Employer","description_format":"text","description_chars":8098,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T00:56:10Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.859,"p_room":1,"age_days":4,"expected_fill_days":29,"reasons":["conf:1","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":170600,"is_top_pay":true},"html_url":"https://alion.io/job/theocc-associate-principal-internal-audit-information-technology-security","json_url":"https://alion.io/job/theocc-associate-principal-internal-audit-information-technology-security.json","meta":{"generated_at":"2026-10-18T00:36:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1042,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1768531},"rest":"https://alion.io/mcp/rest/get_company?id=1768531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftheocc-associate-principal-internal-audit-information-technology-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftheocc-associate-principal-internal-audit-information-technology-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftheocc-associate-principal-internal-audit-information-technology-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/theocc-associate-principal-internal-audit-information-technology-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftheocc-associate-principal-internal-audit-information-technology-security"}]}