Compliance Manager - CMP & GRC

Role Overview

The Compliance Manager, CMP & GRC is responsible for leading Cboe's Compliance Monitoring Program ("CMP"), implementing risk-based compliance control testing and monitoring, driving program enhancements, and supporting alignment with Cboe's governance, risk, and compliance ("GRC") initiative. You'll design and deliver CMP initiatives that enable effective management of compliance risk, strengthen the Three Lines model, and support development of strong controls with mapping to policies and procedures and regulatory requirements. The work is highly collaborative and impactful, offering the opportunity to partner across the Compliance team and with Internal Audit, Enterprise Risk, Legal, and the First Line.

Duties and Responsibilities

Compliance Monitoring Program Development & Execution

• Lead day-to-day implementation of the CMP, including annual planning, compliance testing and monitoring, issues tracking and validation, and reporting.
  • Own and maintain the annual CMP plan, working with risk assessment data and partners across the Three Lines to scope, schedule, and prioritize testing and monitoring activities on a compliance risk basis.
  • Plan and execute compliance testing reviews and compliance monitoring activities: scope based on risk profile, evaluate effectiveness of controls in meeting regulatory obligations and providing strong internal risk mitigation, and create findings as appropriate, documenting results within the GRC platform.
  • Track and validate compliance issues and mitigation plans.
• Identify opportunities, establish action plans, and drive solutions to continuously mature the CMP program as the GRC platform and its underlying processes evolve.
• Coordinate with regional Compliance partners to drive continued alignment of CMP methodology and approach, supporting development of a global program with regional implementation.

Compliance Risk Assessment Development & Management

• Support the ongoing management of an effective Compliance Risk Assessment (CRA), ensuring compliance risks are appropriately identified, mapping risks to controls and regulatory obligations, and maintaining alignment with the Enterprise Risk Management (ERM) framework.
• Plan and execute the annual Compliance Risk Assessment ("CRA") refresh and ad hoc reassessments as needed, working with risk owners to provide support, review, and challenge of inherent and residual risk ratings across the compliance risk hierarchy.
• Identify opportunities to continue the growth of the CRA program, transforming from point-in-time risk assessments to ongoing risk monitoring.
• Monitor and review relevant laws, rules, regulations, and regulatory enforcement actions to identify new and changing compliance requirements or emerging compliance risk.

Tooling, Metrics, & Reporting

• Guide enhancements to the GRC tool to support CMP/CRA requirements, workflows, and reporting in partnership with GRC project team and external consultants.
• Develop dashboards and reporting mechanisms that provide leadership with visibility into compliance issues and remediation, emerging compliance risks, and changes in compliance posture.
• Track, analyze, and report on CMP/CRA status and progress, issues identified, overall compliance health, and impact/effectiveness of the CMP.

Documentation & Other Duties

• Support training and change management for Compliance team associates and First Line risk/control owners as new CMP, CRA, and GRC processes are rolled out.
• Support development of strong controls with mapping to policies and procedures and regulatory requirements.
• Develop and maintain CMP-related policies, procedures, and job aids.
• Independently plan and execute project work within established timeframes, escalating risks, dependencies, and resourcing needs to management as needed.
• Perform other duties as assigned.

The ideal candidate has

Compliance Control Testing and Risk Management Expertise:

• Strong understanding of and experience implementing compliance risk management concepts, including the Three Lines model, risk and control frameworks, and compliance testing/monitoring methodologies
• Experience understanding, developing, and documenting processes and controls
• Demonstrated ability to read and understand regulatory requirements and provide guidance on development of controls that satisfy those requirements
• Working knowledge of GRC platforms

Communication and Collaboration Skills:

• Excellent written communication skills, including the ability to write clearly and effectively for multiple audiences and create concise management-level reporting
• Excellent verbal communication skills, including the ability to ask effective questions, describe findings and compliance concerns with clarity and tact, and adjust approach to communicate successfully with colleagues at all levels and in all departments
• Strong cross-functional collaboration and interpersonal skills, with the ability to build relationships and support across Compliance, Risk, Internal Audit, and the First Line

Effectiveness and Accountability:

• Excellent project management skills; able to independently plan, prioritize, and drive multiple concurrent workstreams to completion within established timeframes
• Strong organizational and prioritization skills with the ability to manage multiple concurrent projects and competing priorities with accuracy and quality
• Ability to work both independently and collaboratively in a dynamic, fast-paced, growth-oriented environment
• Strong attention to detail
• Proven ability to meet deadlines, proactively identify and communicate potential conflicts, and deliver high-quality work

Analytical Thinking Skills:

• Strong analytical and critical-thinking skills; able to evaluate controls, identify gaps, and recommend practical, risk-based solutions
• Foundational knowledge of AI concepts, awareness of related risks, and commitment to responsible and ethical AI use

Required Experience

• Demonstrated experience leading, developing, and executing compliance testing and monitoring programs
• At least 8 years of experience working at a highly regulated entity in the field of compliance monitoring, internal audit, and/or risk management
• Thorough understanding of control design and testing principles
• Hands-on experience using a GRC platform (e.g., Onspring, Archer, ServiceNow GRC)

Education

• Bachelor's degree required

Benefits and Perks of working for Cboe Global Markets

We value the total wellbeing of our people - including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer:

• Fair and competitive salary and incentive compensation packages with an upside for overachievement
• Generous paid time off, including vacation, personal days, sick days and annual community service days
• Health, dental and vision benefits, including access to telemedicine and mental health services
• 2:1 401(k) match, up to 8% match immediately upon hire
• Discounted Employee Stock Purchase Plan
• Tax Savings Accounts for health, dependent and transportation
• Employee referral bonus program
• Volunteer opportunities to help you give back to your communities

Some of our associates' favorite benefits and perks include:

• Complimentary lunch, snacks and coffee in any Cboe office
• Paid Tuition assistance and education opportunities
• Generous charitable giving company match
• Paid parental leave and fertility benefits
• On-site gyms and discounts to other fitness centers
• Paid Time Off

Benefits and Perks of working for Cboe Global Markets

We value the total wellbeing of our people - including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer:

• Fair and competitive salary and incentive compensation packages with an upside for overachievement
• Generous paid time off, including vacation, personal days, sick days and annual community service days
• Flexible, hybrid work environment
• Health, dental and vision benefits, including access to telemedicine and mental health services
• 2:1 401(k) match, up to 8% match immediately upon hire
• Discounted Employee Stock Purchase Plan
• Tax Savings Accounts for health, dependent and transportation
• Employee referral bonus program
• Volunteer opportunities to help you give back to your communities

Some of our associates' favorite benefits and perks include:

Complimentary lunch, snacks and coffee in any Cboe office Paid Tuition assistance and education opportunities Generous charitable giving company match Paid parental leave and fertility benefits On-site gyms and discounts to other fitness centers Paid Time Off

Salary Ranges (applicable for US locations only)
At Cboe, we are committed to providing a competitive, transparent, and market-informed total rewards program. The anticipated base salary range for this role is $121,550-$157,300, with actual compensation determined by job-related factors such as skills, relevant experience, education, internal alignment, and location.

This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long-term equity programs.

Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE.

Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.