Job Description:Location OverviewCboe HQ is located in the historic Old Post Office district, it's a landmark that blends classic architecture with modern amenities. The building features expansive spaces with high ceilings and large windows, offering an abundance of natural light and panoramic views of the city skyline and the Chicago River.
With its prime location in the heart of downtown, the OPO Building provides easy access to major transportation hubs, including Union Station and multiple CTA lines, making it convenient for commuters. The building is home to a variety of amenities, including restaurants, a fitness center, and collaborative workspaces, creating a vibrant and dynamic work environment in one of Chicago's most iconic areas.
Role OverviewCboe Global Markets is seeking a Principal GRC Platform Lead to mature the technical roadmap and implementation of Cboe's GRC (Governance, Risk, and Compliance) platform. This is a hands-on expert role for a major technology domain, advising senior stakeholders across Risk, Compliance, Internal Audit, Third-Party Risk, and other second line functions, guiding platform decisions, and implementing the roadmap, with cross-functional, global reach. The Principal GRC Platform Lead is deeply skilled in hands-on configuring and administering GRC platforms and translating stakeholder requirements and value drivers into intuitive workflows and user experience. In addition to maturing Cboe's current GRC platform implementation, this role will contribute to evolving Cboe's GRC capabilities, partner with stakeholders and Cboe's Technology engineering teams to create data integrations, enhance automation, and leverage AI-driven capabilities. This role reports to the Senior Director, Enterprise Risk Management.
Your responsibilities will be:- Set, prioritize, and evolve the platform roadmap for Cboe's GRC tool, informed by stakeholder needs and GRC objectives, and informed by market trends.
- Gather and translate requirements from global stakeholders across Risk, Compliance, Internal Audit, Third-Party Risk, Information Security, and Regulatory, into configured workflows and reporting capabilities.
- Own the end-to-end user experience of the GRC platform, designing intuitive navigation, forms, dashboards, reporting, and user guides that drive adoption, data quality, and stakeholder satisfaction.
- Contribute to the expansion of the platform's integration footprint, partnering with Cboe Technology engineering teams to define, scope, and validate connections to source-of-risk systems across Cboe's infrastructure and third-party/vendor networks so risk data is drawn live rather than manually maintained.
- Monitor industry trends, and the evolving GRC technology market - including integration-centric ecosystems and embedded AI - to keep Cboe's platform strategy positioned ahead of market shifts.
- Serve as the primary platform authority and escalation point, resolving the most complex configuration, workflow, data, and integration issues, and establishing configuration standards adopted across the platform's global user base.
- Own platform governance, including data model design, workflow design, access controls, configuration standards, release management, and the vendor relationship with the GRC tool provider and integration partners.
- Lead due diligence, proof-of-concept work, and build-vs-buy assessments for new platform capabilities.
- Establish and maintain documentation, configuration standards, and job aids that enable global teams to use and extend the GRC platform consistently.
- Ensure the platform's reliability, security, and data integrity, partnering with Information Security and Technology on access management, change control, and incident response.
The ideal candidate has- 8+ years of experience in GRC platform delivery, configuration, and administration, including demonstrated ownership of a GRC platform's roadmap at a regulated financial services firm or market infrastructure provider (e.g., exchange, clearinghouse, broker-dealer, or bank). Experience with a Systemically Important Financial Institution (SIFI) or Systemically Important Financial Market Utility (SIFMU) a plus.
- Bachelor's degree in Information Systems, Computer Science, Business, or a related field. While this role does not require hands-on development, that technical foundation supports faster, more precise scoping of integrations and more credible technical trade-off conversations with Technology partners.
- Demonstrated experience translating end-user and stakeholder requirements into intuitive platform workflows, forms, and reporting, with a strong user-experience sensibility for a non-technical, global user base.
- Working knowledge of data integration concepts (e.g., REST APIs) sufficient to scope, validate, and partner with Technology/engineering teams on connections between the GRC platform and source-of-risk systems; this is a platform ownership role, not a software engineering role, so hands-on development is not required.
- Strong understanding of risk and control frameworks (e.g., COSO, NIST), RCSA methodology, and the regulatory environment applicable to exchanges, clearinghouses, or other financial market utilities (e.g., SEC, CFTC, UK Op Res, EU DORA, etc.).
- Demonstrated ability to set platform direction and influence senior stakeholders across global teams, including without direct authority.
- Experience directing AI-enabled or automation capabilities in a GRC or compliance platform, such as automated evidence collection, continuous control monitoring, or intelligent risk/regulatory mapping, a plus.
- Excellent written and verbal communication skills, with experience presenting platform strategy and roadmap decisions to senior leadership.
- Strong project management skills, with the ability to manage competing priorities and stakeholders across time zones. Up to 10-15% international travel and ability to cover late/early hours as necessary for other regions.
- Relevant certifications (e.g., CRISC, CISA, CISSP, or Onspring/Archer platform certifications) a plus.
Benefits and Perks of working for Cboe Global MarketsWe value the total wellbeing of our people - including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are given at any organization. Still, you should know we offer:
- Fair and competitive salary and incentive compensation packages with an upside for overachievement
- Generous paid time off, including vacation, personal days, sick days and annual community service days
- Health, dental and vision benefits, including access to telemedicine and mental health services
- 2:1 401(k) match, up to 8% match immediately upon hire
- Discounted Employee Stock Purchase Plan
- Tax Savings Accounts for health, dependent and transportation
- Employee referral bonus program
- Volunteer opportunities to help you give back to your communities
Some of our associates' favorite benefits and perks include:
- Complimentary lunch, snacks and coffee in any Cboe office
- Paid Tuition assistance and education opportunities
- Generous charitable giving company match
- Paid parental leave and fertility benefits
- On-site gyms and discounts to other fitness centers
- Paid Time Off
Salary Ranges (applicable for US locations only)At Cboe, we are committed to providing a competitive, transparent, and market-informed total rewards program. The anticipated base salary range for this role is $163,625-$211,750, with actual compensation determined by job-related factors such as skills, relevant experience, education, internal alignment, and location.
This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long-term equity programs.
Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE.
Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.
