About the role
Job Description
Building trusted markets — powered by our people
At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world.
We’re building meaningful ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. We strive to provide employees a safe space to network, share ideas and create opportunities.
To support strong partnership and team connection, this role follows a four day in office work model.
Location Overview
Cboe HQ is located in the historic Old Post Office district, it’s a landmark that blends classic architecture with modern amenities. The building features expansive spaces with high ceilings and large windows, offering an abundance of natural light and panoramic views of the city skyline and the Chicago River.
With its prime location in the heart of downtown, the OPO Building provides easy access to major transportation hubs, including Union Station and multiple CTA lines, making it convenient for commuters. The building is home to a variety of amenities, including restaurants, a fitness center, and collaborative workspaces, creating a vibrant and dynamic work environment in one of Chicago's most iconic areas.
Role Overview
Cboe Global Markets is seeking a Principal GRC Platform Lead to mature the technical roadmap and implementation of Cboe’s GRC (Governance, Risk, and Compliance) platform. This is a hands-on expert role for a major technology domain, advising senior stakeholders across Risk, Compliance, Internal Audit, Third-Party Risk, and other second line functions, guiding platform decisions, and implementing the roadmap, with cross-functional, global reach. The Principal GRC Platform Lead is deeply skilled in hands-on configuring and administering GRC platforms and translating stakeholder requirements and value drivers into intuitive workflows and user experience. In addition to maturing Cboe’s current GRC platform implementation, this role will contribute to evolving Cboe’s GRC capabilities, partner with stakeholders and Cboe’s Technology engineering teams to create data integrations, enhance automation, and leverage AI-driven capabilities. This role reports to the Senior Director, Enterprise Risk Management.
Your responsibilities will be:
Set, prioritize, and evolve the platform roadmap for Cboe's GRC tool, informed by stakeholder needs and GRC objectives, and informed by market trends.
Gather and translate requirements from global stakeholders across Risk, Compliance, Internal Audit, Third-Party Risk, Information Security, and Regulatory, into configured workflows and reporting capabilities.
Own the end-to-end user experience of the GRC platform, designing intuitive navigation, forms, dashboards, reporting, and user guides that drive adoption, data quality, and stakeholder satisfaction.
Contribute to the expansion of the platform's integration footprint, partnering with Cboe Technology engineering teams to define, scope, and validate connections to source-of-risk systems across Cboe’s infrastructure and third-party/vendor networks so risk data is drawn live rather than manually maintained.
·
Monitor industry trends, and the evolving GRC technology market — including integration-centric ecosystems and embedded AI — to keep Cboe's platform strategy positioned ahead of market shifts.
Serve as the primary platform authority and escalation point, resolving the most complex configuration, workflow, data, and integration issues, and establishing configuration standards adopted across the platform's global user base.
Own platform governance, including data model design, workflow design, access controls, configuration standards, release management, and the vendor relationship with the GRC tool provider and integration partners.
Lead due diligence, proof-of-concept work, and build-vs-buy assessments for new platform capabilities.
Establish and maintain documentation, configuration standards, and job aids that enable global teams to use and extend the GRC platform consistently.
Ensure the platform's reliability, security, and data integrity, partnering with Information Security and Technology on access management, change control, and incident response.
The ideal candidate has
8+ years of experience in GRC platform delivery, configuration, and administration, including demonstrated ownership of a GRC platform's roadmap at a regulated financial services firm or market infrastructure provider (e.g., exchange, clearinghouse, broker-dealer, or bank). Experience with a Systemically Important Financial Institution (SIFI) or Systemically Important Financial Market Utility (SIFMU) a plus.
Bachelor's degree in Information Systems, Computer Science, Business, or a related field. While this role does not require hands-on development, that technical foundation supports faster, more precise scoping of integrations and more credible technical trade-off conversations with Technology partners.
Demonstrated experience translating end-user and stakeholder requirements into intuitive platform workflows, forms, and reporting, with a strong user-experience sensibility for a non-technical, global user base.
Working knowledge of data integration concepts (e.g., REST APIs) sufficient to scope, validate, and partner with Technology/engineering teams on connections between the GRC platform and source-of-risk systems; this is a platform ownership role, not a software engineering role, so hands-on development is not required.
Strong understanding of risk and control frameworks (e.g., COSO, NIST), RCSA methodology, and the regulatory environment applicable to exchanges, clearinghouses, or other financial market utilities (e.g., SEC, CFTC, UK Op Res, EU DORA, etc.).
Demonstrated ability to set platform direction and influence senior stakeholders across global teams, including without direct authority.
Experience directing AI-enabled or automation capabilities in a GRC or compliance platform, such as automated evidence collection, continuous control monitoring, or intelligent risk/regulatory mapping, a plus.
Excellent written and verbal communication skills, with experience presenting platform strategy and roadmap decisions to senior leadership.
Strong project management skills, with the ability to manage competing priorities and stakeholders across time zones. Up to 10-15% international travel and ability to cover late/early hours as necessary for other regions.
Relevant certifications (e.g., CRISC, CISA, CISSP, or Onspring/Archer platform certifications) a plus.
Benefits and Perks of working for Cboe Global Markets
We value the total wellbeing of our people – including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are given at any organization. Still, you should know we offer:
Fair and competitive salary and incentive compensation packages with an upside for overachievement
Generous paid time off, including vacation, personal days, sick days and annual community service days
Health, dental and vision benefits, including access to telemedicine and mental health services
2:1 401(k) match, up to 8% match immediately upon hire
Discounted Employee Stock Purchase Plan
Tax Savings Accounts for health, dependent and transportation
Employee referral bonus program
Volunteer opportunities to help you give back to your communities
Some of our associates’ fav