{"id":2578528,"url":"https://alion.io/job/theocc-lead-associate-principal-security-governance","title":"Lead Associate Principal, Security Governance","company":{"id":1768531,"name":"The Options Clearing Corporation","domain":"theocc.com","url":"https://alion.io/company/theocc-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":122100,"max":170500,"currency":"USD","period":"year","gross":null,"usd_annual":170500},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Claude Code","optional":false},{"name":"Confluence","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"Jira","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"Tableau","optional":false}],"status":"closed","first_seen_at":"2026-08-12T00:00:00Z","employer_posted_date":"2026-08-12","last_verified_at":"2026-10-24T10:01:23Z","board_verified":false,"closed_at":"2026-10-24T10:01:23Z","days_open":73,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":73},"description":"*****THIS POSITION IS NOT ELIGIBLE FOR VISA SPONSORSHIP*****\nTo be considered for this position, applications and resumes are accepted only through our careers site by directly applying to the posted job. We do not accept unsolicited resumes or sales solicitations from staffing agencies. Any OCC employee wishing to submit a referral must do so through their Workday account. Any resume submitted outside of an active job posting will not be considered for employment.\nWhat You'll Do:\nThe Lead Associate Principal, Security Governance supports the Security Services Department and will regularly liaise with Compliance, Operational Risk Management Compliance, Internal Audit, Legal, and OCC’s Regulators. This role will lead the end-to-end lifecycle and change management of Security Services policies, procedures, standards, and control documentation, including the development, review, approval, publication, and retirement, in support of the NIST Cyber Security framework. Additionally, this person is responsible for supporting information security initiatives related to regulatory exam and Internal Audit remediation planning, tracking, and mitigation. Likewise, this role will provide subject matter expertise in reviewing the management self-testing efforts for the Security Service Department by identifying, recommending, and driving enhancements to the performance, integrity, and compliance of the organization’s processes.\nThis role will also focus on compliance with applicable regulatory statutes and legal rules and requirements (i.e. SEC-Regulation SCI, CFTC-System Safeguards, etc.) as they relate to information security.\nPrimary Duties and Responsibilities:\nTo perform this job successfully, an individual must be able to perform each primary duty satisfactorily.\nProvide subject matter expertise in the development, review, and continuous improvement of Security Services policies, procedures, and controls, ensuring documentation remains current, appropriately governed, and aligned with applicable regulatory requirements, industry frameworks, and OCC’s risk management objectives.\n\nRecommendation and oversight of appropriate reporting frameworks, standards, and best practices.\n\nSupporting efforts for remediating regulatory and Internal Audit findings, including analyzing data to identify root cause of problems, identifying trends, formulating solutions, and escalating potential issues related to the lifecycle of remediation.\n\nAct as a supporting point of contact from Security Services to senior management in Compliance, Internal Audit, Enterprise Risk Management, Legal and regulators\n\nSupport strategic development, implementation, review, and improvement of right sized management self-testing of controls.\n\nServe as the governance facilitator for the Security Working Group Program, ensuring the Working Group meets its applicable obligations and requirements including overseeing the maintenance of appropriate governance documentation and records.\n\nAct on Security Services’ behalf related to compliance matters including developing and implementing strategies for strengthening the Security Services compliance posture.\n\nProvide management oversight and subject matter expertise input on Security Services’ responses to Third-Party requests and surveys.\n\nPerform ad-hoc duties for Security Governance management as necessary.\n\nSupervisory Responsibilities:\nNone\n\nQualifications:\nThe requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.\nExtensive experience in Information Security related policy, procedure and control writing.\n\nThorough understanding of information technology and risk management concepts\n\nExtensive knowledge of and experience working with Security and Technology authoritative industry standards and control frameworks (e.g. NIST CSF, NIST 800-53, CIS 20, COBIT, COSO, ITIL, ISO 27001, CSA CCM, etc.)\n\nProficient knowledge of applicable regulatory, legal rules and requirements (e.g., SEC, CFTC, Federal Reserve Board, etc.) as they pertain to Information Security.\n\nDemonstrable proficiency with AI tools (Claude Code)\n\nWorking knowledge of Cloud implementation and Cloud compliance strategies including for data, information, application, platform and network security a plus\n\nDeep seated understanding of Systems Development Life Cycle (SDLC) process (Agile) and Secure Software Development Lifecycle a plus\n\nDemonstrative leadership skills and capabilities\n\nHighly proficient in collaborating with internal business clients from different departments and at various levels of seniority.\n\nExcellent organizational, written and oral communication skills.\n\nTechnical Skills:\nExperience working with PolicyTech, Confluence, Jira\n\nStrong experience in Information Security related policy, procedure and control management\n\nUnderstanding information related frameworks and standards such as COBIT, NIST 800-53, NIST CSF, ISO etc.\n\nExperience in technology risk management principles and practices\n\nExperience in working with regulatory frameworks and business requirements relevant to OCC such as, RegSCI, CFTC, etc.\n\nProficiency using an integrated risk management system (such as RSA Archer Suite) and a business intelligence tool (e.g, Tableau)\n\nEducation and/or Experience:\nBachelor’s degree in computer science, Management Information Systems, Business Studies, or related field or the equivalent combination of education and/or relevant experience\n\n7+ years previous work experience in Information Security, Compliance, Risk Management, Project Management, or Data analytics\n\nDemonstrative communication and collaboration experience across multiple functions and/or departments\n\nExperience managing regulatory relations and requirements\n\nPrevious work in Compliance, Audit, Risk Management, Project Management, or control activities in the financial services industry.\n\nCertificates or Licenses:\nProfessional network and/or security certifications a plus (i.e., GIAC, CISSP, CISA, CISM, CRISC)\n\nAbout Us\nThe Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.\nBenefits\nA highly collaborative and supportive environment developed to encourage work-life balance and employee wellness. Some of these components include:\nA hybrid work environment, up to 2 days per week of remote work\nTuition Reimbursement to support your continued education\nStudent Loan Repayment Assistance\nTechnology Stipend allowing you to use the device of your choice to connect to our network while working remotely\nGenerous PTO and Parental leave \n401k Employer Match\nCompetitive health benefits including medical, dental and vision\nVisit https://www.theocc.com/careers/thriving-together for more information.\nCompensation\nThe salary range listed for any given position is exclusive of fringe benefits and potential bonuses. If hired at OCC, your final base salary compensation will be determined by factors such as skills, experience and/or education. \nIn addition, we believe in the importance of pay equity and consider internal equity of our current team members as part of any final offer. \nWe typically do not hire at the maximum of the range in order toallow for future and continued salary growth. We also offer a substantial benefits package as noted on www.theocc.com/careers\nAll employees may be eligible for a discretionary bonus. Discretionary bonuses are based on various factors, including, but not limited to, company and individual performance and are not guaranteed.\nSalary Range\n$122,100.00 - $170,500.00Incentive Range\n8% to 15%This position is eligible for an annual discretionary incentive compensation award, for which the target range is listed above (see Incentive Range). The amount of such award, if any, will be based on various factors, including without limitation, both individual and company performance.\nStep 1\nWhen you find a position you're interested in, click the 'Apply' button. Please complete the application and attach your resume.\nStep 2\nYou will receive an email notification to confirm that we've received your application.\nStep 3\nIf you are called in for an interview, a representative from OCC will contact you to set up a date, time, and location.\nFor more information aboutOCC, please clickhere.\nOCC is an Equal Opportunity Employer","description_format":"text","description_chars":9069,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-15T00:56:10Z"},{"event":"close","at":"2026-10-24T10:01:23Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":170500,"is_top_pay":true},"html_url":"https://alion.io/job/theocc-lead-associate-principal-security-governance","json_url":"https://alion.io/job/theocc-lead-associate-principal-security-governance.json","meta":{"generated_at":"2026-10-24T20:26:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29806,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1768531},"rest":"https://alion.io/mcp/rest/get_company?id=1768531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftheocc-lead-associate-principal-security-governance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftheocc-lead-associate-principal-security-governance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftheocc-lead-associate-principal-security-governance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/theocc-lead-associate-principal-security-governance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftheocc-lead-associate-principal-security-governance"}]}