Senior Information Security Compliance Analyst

National Futures Association • Chicago, IL

3d • $112,400 - $159,600

About The Position

NFA is a purpose-driven organization that safeguards the integrity of derivatives markets, protects investors, and ensures its Members meet regulatory obligations. The role supports NFA’s cybersecurity risk management program by identifying, assessing, tracking, and reporting cybersecurity risks. The analyst partners with Security Compliance team members and stakeholders across the organization to help address cybersecurity challenges and improve security governance. The posting also describes the position as “Security Compliance & Risk Manager.”

Requirements

• Undergraduate degree in cybersecurity, information systems, information technology, risk management, business, or a related field, or equivalent experience.
• Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance, or a related discipline.
• Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar.
• Understanding of cybersecurity risks, security controls, vulnerability management, and compliance concepts.
• Knowledge of governance, risk, and compliance concepts and processes.
• Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards, and automation tools.
• Ability to work independently and communicate with technical and non-technical stakeholders.

Nice To Haves

• Experience with ServiceNow or similar workflow and ticketing platforms.
• Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP, or similar.

Responsibilities

• Support security compliance activities, including evidence collection, control validation, and audit preparation.
• Participate in planning, performing, and documenting cybersecurity control testing, including developing remediation plans.
• Support the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
• Maintain risk registers, issue logs, and remediation tracking processes.
• Support internal and external audits by providing testing results, evidence, and compliance documentation.
• Ensure security documentation aligns with business requirements, regulatory expectations, and industry frameworks.
• Prepare reports, dashboards, and presentations for security leadership and stakeholders.
• Contribute to continuous improvement initiatives that enhance security governance, efficiency, and effectiveness.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior