Systems Risk Analyst

Commodity Futures Trading Commission • Washington, DC

8d

About The Position

This position is in the Compliance Branch of the Division of Market Oversight (DMO), where the incumbent serves as senior staff in the Market Continuity Program (MCP). The role supports the Commodity Futures Trading Commission’s oversight of Designated Contract Markets (DCMs), Swap Data Repositories (SDRs), and Swap Execution Facilities (SEFs), evaluating their compliance with system safeguards requirements under the Commodity Exchange Act and CFTC regulations. The incumbent applies advanced knowledge of IT concepts, standards, guidelines, and best practices for system safeguards and security control reviews.

At the full performance level, the analyst serves as a senior IT and system safeguards expert on complex, sensitive, and mission-critical oversight matters. The role includes leading or participating in System Safeguards Examinations (SSEs) and Targeted Maturity Assessments (TMAs). These reviews evaluate reliability, cybersecurity and physical security, scalable capacity, internal oversight, testing, risk analysis, and oversight programs for automated trading and data reporting systems. Reviews also assess emergency procedures, backup facilities, disaster recovery, and periodic testing of backup resources. The seven areas of review are enterprise risk management and governance; information security; business continuity and disaster recovery, including pandemic planning; capacity and performance planning; systems operations; systems development and quality assurance; and physical security and environmental controls.

The analyst reviews documents, conducts extended on-site interviews with senior management and technical staff, analyzes findings using expert knowledge of risk oversight and IT controls, contributes to findings and recommendations, drafts detailed reports, communicates results to regulated entities, and assesses corrective actions. The incumbent also represents MCP on DMO teams reviewing applications for DCM designation or SDR or SEF registration. This includes technical reviews of applicants’ system safeguards compliance, communication with applicants, evaluation of applicant sufficiency, and drafting system safeguards portions of reports and orders. The analyst may independently conduct technical reviews, including on-site visits to registered entities and data centers.

Requirements

• At least one year of specialized experience equivalent to the CT/GS-12 level in Federal service, or comparable experience outside Federal service.
• Experience applying IT concepts, standards, guidelines, and techniques related to system safeguards and security control reviews.
• Experience overseeing systems compliance in the electronic trading environment, including cybersecurity and physical security, scalable capacity, internal oversight, and testing of automated trading and data reporting systems.
• Experience evaluating emergency procedures, backup facilities, and disaster recovery plans for electronic trading systems.
• U.S. citizenship.
• Compliance with Selective Service registration requirements for males born after December 31, 1959.
• Ability to demonstrate competency in information technology architecture, technical competence, risk management, and oral and written communication.
• May be required to serve a one-year probationary period; additional information notes a one-year probationary or two-year trial period may apply.

Nice To Haves

• One or more professional certifications are highly desired, including CISSP, CISA, CBCP, CDCP, COEIT, SSCP, CAP, CSSLP, CIA, CISM, CRISC, CFCP, MBCP, BCCP, BCCLA, or DRCS.

Responsibilities

• Plan and conduct System Safeguards Examinations (SSEs) and Targeted Maturity Assessments (TMAs) of DCMs, SDRs, and SEFs.
• Evaluate regulated entities’ compliance with system safeguards requirements, including the reliability, cybersecurity and physical security, scalable capacity, internal oversight, and testing of automated trading and data reporting systems.
• Review system safeguards risk analysis and oversight programs against the Commodity Exchange Act and CFTC regulations.
• Review documents provided by entities under examination or assessment.
• Conduct extended on-site interviews with regulated entities’ senior management and technical staff.
• Analyze information gathered during reviews using expert knowledge of risk oversight, IT principles, controls, procedures, and automated-systems best practices.
• Participate in determining appropriate findings and recommendations.
• Draft detailed reports of MCP findings and recommendations.
• Communicate findings and recommendations to regulated entities’ senior management and technical staff.
• Assess the efficacy and timeliness of corrective actions taken by regulated entities.
• Represent MCP on DMO teams reviewing applications for DCM designation or SDR or SEF registration.
• Conduct technical reviews of applicants’ compliance with system safeguards requirements, communicate with applicants, and evaluate applicant sufficiency.
• Draft system safeguards-related portions of application reports and designation or registration orders.
• Independently conduct technical reviews when required, including on-site visits to registered entities and data centers.

Benefits

• Federal employee benefits package available to the employee and family; specific benefits depend on position type and should be confirmed with the hiring agency.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed