Compliance Manager - CMP & GRC

Cboe Global Markets•Chicago, IL

4d•Hybrid

About The Position

The Compliance Manager, CMP & GRC leads Cboe’s Compliance Monitoring Program (CMP), implementing risk-based compliance control testing and monitoring, enhancing the program, and supporting alignment with the company’s governance, risk, and compliance (GRC) initiative. The role develops CMP initiatives to manage compliance risk, strengthen the Three Lines model, and support controls mapped to policies, procedures, and regulatory requirements. It partners across Compliance and with Internal Audit, Enterprise Risk, Legal, and the First Line. The position follows a four-day-in-office work model. The role also supports ongoing management of the Compliance Risk Assessment (CRA), including identifying and mapping compliance risks to controls and regulatory obligations and maintaining alignment with the Enterprise Risk Management framework. It helps enhance GRC tooling, reporting, and workflows; supports training and change management; and develops and maintains CMP-related documentation. The position requires independent planning and execution of project work, with escalation of risks, dependencies, and resourcing needs to management.

Requirements

Demonstrated experience leading, developing, and executing compliance testing and monitoring programs.
At least 8 years of experience at a highly regulated entity in compliance monitoring, internal audit, and/or risk management.
Thorough understanding of control design and testing principles.
Hands-on experience using a GRC platform, such as Onspring, Archer, or ServiceNow GRC.
Strong understanding and experience implementing compliance risk management concepts, including the Three Lines model, risk and control frameworks, and compliance testing and monitoring methodologies.
Experience understanding, developing, and documenting processes and controls.
Ability to interpret regulatory requirements and guide development of controls that satisfy them.
Excellent written communication skills, including clear writing for multiple audiences and concise management-level reporting.
Excellent verbal communication skills, including asking effective questions, clearly and tactfully describing findings and compliance concerns, and adapting communication to colleagues at all levels and across departments.
Strong cross-functional collaboration and interpersonal skills to build relationships across Compliance, Risk, Internal Audit, and the First Line.
Excellent project management, organizational, and prioritization skills, including independently driving concurrent workstreams to completion accurately and on time.
Ability to work independently and collaboratively in a dynamic, fast-paced, growth-oriented environment.
Strong attention to detail and ability to meet deadlines, proactively identify and communicate potential conflicts, and deliver high-quality work.
Strong analytical and critical-thinking skills to evaluate controls, identify gaps, and recommend practical, risk-based solutions.
Foundational knowledge of AI concepts, awareness of related risks, and commitment to responsible and ethical AI use.
Bachelor’s degree required.
Must be legally authorized to work in the United States without employer sponsorship now or in the future; the position is not eligible for visa sponsorship.

Responsibilities

Lead day-to-day implementation of the CMP, including annual planning, compliance testing and monitoring, issues tracking and validation, and reporting.
Own and maintain the annual CMP plan, using risk assessment data and partnering across the Three Lines to scope, schedule, and prioritize activities based on compliance risk.
Plan and execute compliance testing reviews and monitoring activities, evaluate control effectiveness, and document results and findings in the GRC platform.
Track and validate compliance issues and mitigation plans.
Identify opportunities and drive action plans to mature the CMP as the GRC platform and related processes evolve.
Coordinate with regional Compliance partners to align CMP methodology and support a global program with regional implementation.
Support ongoing management of an effective CRA, identifying compliance risks, mapping them to controls and regulatory obligations, and aligning with the ERM framework.
Plan and execute the annual CRA refresh and ad hoc reassessments, supporting and challenging risk owners’ inherent and residual risk ratings.
Develop the CRA program toward ongoing risk monitoring rather than point-in-time assessments.
Monitor laws, rules, regulations, and enforcement actions to identify new or changing compliance requirements and emerging risks.
Guide GRC tool enhancements to support CMP and CRA requirements, workflows, and reporting in partnership with the GRC project team and external consultants.
Develop dashboards and reporting mechanisms that provide leadership visibility into issues and remediation, emerging risks, and changes in compliance posture.
Track, analyze, and report on CMP and CRA status, progress, identified issues, compliance health, and program impact and effectiveness.
Support training and change management for Compliance associates and First Line risk and control owners as CMP, CRA, and GRC processes are introduced.
Support development of controls mapped to policies, procedures, and regulatory requirements.
Develop and maintain CMP-related policies, procedures, and job aids.
Independently plan and execute project work within established timeframes, escalating risks, dependencies, and resourcing needs to management as needed.
Perform other duties as assigned.

Benefits

Competitive salary and incentive compensation, with potential upside for overachievement.
Generous paid time off, including vacation, personal and sick days, and annual community service days.
Health, dental, and vision benefits, including telemedicine and mental health services.
401(k) match of 2:1, up to an 8% match, immediately upon hire.
Discounted Employee Stock Purchase Plan.
Tax savings accounts for health, dependent care, and transportation.
Employee referral bonus program.
Volunteer opportunities.
Complimentary lunch, snacks, and coffee in Cboe offices.
Tuition assistance and education opportunities.
Company charitable giving match.
Paid parental leave and fertility benefits.
On-site gyms and discounts to other fitness centers.
Flexible, hybrid work environment.
Potential eligibility for annual incentive compensation and, where applicable, long-term equity programs.