Compliance Manager - CMP & GRC

Cboe Global Markets•Lenexa, KS

1d•$121,550 - $157,300•Hybrid

About The Position

The Compliance Manager, CMP & GRC leads Cboe’s Compliance Monitoring Program (CMP), implementing risk-based compliance control testing and monitoring, driving program enhancements, and supporting alignment with the company’s governance, risk, and compliance (GRC) initiative. The role designs and delivers CMP initiatives to manage compliance risk, strengthen the Three Lines model, and support strong controls mapped to policies, procedures, and regulatory requirements. It works collaboratively with Compliance, Internal Audit, Enterprise Risk, Legal, and First Line teams, as well as regional Compliance partners. The position owns the annual CMP plan; leads testing, monitoring, issue tracking, validation, and reporting; and supports development and ongoing management of the Compliance Risk Assessment (CRA). It also guides GRC tool enhancements, develops dashboards and management reporting, monitors regulatory developments, and supports training, change management, and documentation. The role follows a four-day-in-office work model. The role requires a bachelor’s degree, demonstrated experience leading, developing, and executing compliance testing and monitoring programs, at least eight years of experience at a highly regulated entity in compliance monitoring, internal audit, and/or risk management, a thorough understanding of control design and testing principles, and hands-on experience with a GRC platform. The anticipated U.S. base salary range is $121,550–$157,300. Annual incentive compensation and, where applicable, long-term equity program participation may also be available. The position is not eligible for visa sponsorship.

Requirements

Bachelor’s degree required.
Demonstrated experience leading, developing, and executing compliance testing and monitoring programs.
At least 8 years of experience at a highly regulated entity in compliance monitoring, internal audit, and/or risk management.
Thorough understanding of control design and testing principles.
Hands-on experience using a GRC platform, such as Onspring, Archer, or ServiceNow GRC.
Strong understanding and experience implementing compliance risk management concepts, including the Three Lines model, risk and control frameworks, and compliance testing and monitoring methodologies.
Experience understanding, developing, and documenting processes and controls.
Ability to interpret regulatory requirements and guide the development of controls that satisfy them.
Excellent written communication, including clear writing for multiple audiences and concise management-level reporting.
Excellent verbal communication, including asking effective questions, explaining findings and compliance concerns tactfully, and adapting communication to colleagues at all levels and across departments.
Strong collaboration and interpersonal skills, with ability to build relationships across Compliance, Risk, Internal Audit, and the First Line.
Excellent project management skills and ability to independently plan, prioritize, and complete concurrent workstreams within established timeframes.
Strong organizational and prioritization skills, attention to detail, and ability to manage competing priorities accurately and with quality.
Ability to work independently and collaboratively in a dynamic, fast-paced, growth-oriented environment.
Ability to meet deadlines, proactively identify and communicate potential conflicts, and deliver high-quality work.
Strong analytical and critical-thinking skills, including evaluating controls, identifying gaps, and recommending practical, risk-based solutions.
Foundational knowledge of AI concepts, awareness of related risks, and commitment to responsible and ethical AI use.
Must be legally authorized to work in the United States without employer visa sponsorship now or in the future.

Responsibilities

Lead day-to-day implementation of the Compliance Monitoring Program, including annual planning, compliance testing and monitoring, issue tracking and validation, and reporting.
Own and maintain the annual CMP plan, using risk assessment data and working across the Three Lines to scope, schedule, and prioritize risk-based activities.
Plan and execute compliance testing reviews and monitoring, evaluate control effectiveness against regulatory obligations and internal risk mitigation needs, document results in the GRC platform, and create findings when appropriate.
Track and validate compliance issues and mitigation plans.
Identify opportunities and drive solutions to mature the CMP as the GRC platform and processes evolve.
Coordinate with regional Compliance partners to align CMP methodology and support a global program with regional implementation.
Manage the Compliance Risk Assessment, ensuring risks are identified, mapped to controls and regulatory obligations, and aligned with the Enterprise Risk Management framework.
Plan and execute annual CRA refreshes and ad hoc reassessments; support, review, and challenge risk owners’ inherent and residual risk ratings.
Develop the CRA program toward ongoing risk monitoring rather than point-in-time assessments.
Monitor laws, rules, regulations, and enforcement actions for new or changing requirements and emerging compliance risks.
Guide GRC tool enhancements for CMP and CRA requirements, workflows, and reporting in partnership with the GRC project team and external consultants.
Develop dashboards and reporting mechanisms to give leadership visibility into compliance issues, remediation, emerging risks, and changes in compliance posture.
Track, analyze, and report CMP/CRA status, progress, issues, compliance health, and program impact and effectiveness.
Support training and change management for Compliance associates and First Line risk and control owners as processes are introduced.
Support development of controls mapped to policies, procedures, and regulatory requirements.
Develop and maintain CMP-related policies, procedures, and job aids.
Independently plan and execute project work within established timeframes, escalating risks, dependencies, and resourcing needs as needed.
Perform other duties as assigned.

Benefits

Fair and competitive salary and incentive compensation, with potential upside for overachievement.
Generous paid time off, including vacation, personal days, sick days, and annual community service days.
Health, dental, and vision benefits, including telemedicine and mental health services.
2:1 401(k) match, up to an 8% match immediately upon hire.
Discounted Employee Stock Purchase Plan.
Tax savings accounts for health, dependent care, and transportation.
Employee referral bonus program.
Volunteer opportunities and annual community service days.
Complimentary lunch, snacks, and coffee in Cboe offices.
Tuition assistance and education opportunities.
Company charitable giving match.
Paid parental leave and fertility benefits.
On-site gyms and discounts to other fitness centers.
Flexible, hybrid work environment.
Potential eligibility for annual incentive compensation and, where applicable, long-term equity programs.