Top Cybersecurity Jobs

The Senior Associate manages third-party risk assessments, onboarding, monitoring, offboarding, remediation plans, stakeholder communications, and regulatory or audit requests. The role supports governance and oversight across vendors, financial market utilities, exchanges, clearing members, banks, and other third parties. Responsibilities also include tracking risks to closure, improving TPRM processes, responding to third-party requests, and leading special projects. Candidates need risk management, audit, or TPRM experience, strong analytical and communication skills, a bachelor’s degree, and at least two years of relevant experience.

Leads and supports risk-based IT and security audits, evaluating controls, regulatory compliance, operational and strategic risks, and technology implementations. Identifies root causes, recommends improvements, prepares audit reports, and presents findings to management. Applies IIA, AICPA, COBIT, and NIST standards while partnering with business leaders and maintaining audit quality. The role requires at least five years of IT and security audit experience and may involve cybersecurity reviews and internal audits.

Supports enterprise IT and cybersecurity risk management by leading risk assessments, maintaining risk inventories, applying frameworks such as NIST and COBIT, generating Archer reports, automating oversight analytics, and presenting findings to governance committees and regulators. The role collaborates with IT, Security, Legal, Compliance, Internal Audit, and third-party risk teams while improving risk methodologies, controls, policies, and issue tracking.

Supports IT and Security operational risk management through risk assessments, control evaluations, risk inventories, regulatory alignment, and governance reporting. Leads risk intake and enterprise assessments using NIST, COBIT, RSA Archer, JIRA, and ServiceNow. Develops AI governance protocols and risk registers, audits distributed ledger technology programs, and reviews IAM controls including RBAC, access reviews, and least-privilege policies. Collaborates with technology, compliance, legal, audit, and business stakeholders to improve ORM methodologies and resolve findings.

Supports Cyber Defense activities including reviewing workflows for automation opportunities, assisting with security monitoring and analysis, and helping integrate security tools. The intern will gain exposure to cyber defense operations, incident response, and security technology while contributing to process improvement and technical reporting. This is a 12-week seasonal summer internship in a hybrid Chicago work environment.

Supports AWS cloud security guardrails, IAM controls, Open Policy Agent policies, governance automation, and FinOps tooling. Responsibilities include building monitoring and remediation tools, developing cost anomaly detection and cleanup automation, creating financial operations dashboards, and contributing to policy-as-code and tagging or chargeback solutions. The intern works on real platform engineering backlog items while developing cloud security and cost management expertise.

Supports OCC’s Product and Application Security team by using AI and LLMs to codify secure coding standards, create AI-consumable configuration files, and automate security enforcement in CI/CD pipelines and developer tooling. The intern will collaborate with development teams, assist with vulnerability triage and remediation guidance, and gain hands-on experience across application security, software engineering, and frontier AI.

Manage and support privileged access management infrastructure, including HashiCorp Vault, CyberArk, PKI, and related systems. Provide operational support, troubleshooting, patching, upgrades, secrets lifecycle management, and user assistance. Design security architecture, enforce security-as-code practices, develop integrations and platform enhancements, and apply AI-based capabilities to improve detection and remediation. Collaborate cross-functionally to strengthen the organization’s cybersecurity posture.

The Associate Principal of Security Engineering will manage privileged access systems, implement AI-based security, and enhance security architecture while providing support and leadership in cybersecurity initiatives.

Provide 24x7 operational support and lifecycle management for privileged access systems (CyberArk, HashiCorp Vault, PKI/HSMs). Implement AI-based security capabilities, maintain CI/CD/cloud integrations (Terraform, Ansible, Jenkins), automate with scripting, troubleshoot incidents, apply security architecture principles, and collaborate with cross-functional teams to improve platform reliability and user experience.