CME Group Hiring IT Compliance & Controls Analyst I | Bangalore

Role Overview

The IT Compliance and Controls Analyst I works within the Global Information Security (GIS) department and supports the Technology Compliance team. The role contributes to established IT governance processes that manage technology risk and confirm that key controls are implemented and operating effectively to avoid audit findings and reduce corporate risk.

Primary Responsibilities

• Learn and understand the objectives and operations of the CME Group Technology Compliance team.
• Perform control assessments to evaluate the effectiveness and adequacy of internal controls while confirming adherence to company policies and procedures.
• Maintain current knowledge of the organization’s IT infrastructure, applications, and technology standards.
• Prepare accurate and detailed work papers describing performed work, testing results, and final conclusions.
• Develop collaborative relationships with business stakeholders to support the controls testing program.
• Maintain knowledge of CME Group operations, internal policies, procedures, and applicable regulatory obligations.

Key Activities

• Conduct testing of internal technology controls aligned with regulatory requirements.
• Identify findings and recommend appropriate remediation actions.
• Suggest improvements to IT control and risk processes, including opportunities for automation.
• Provide timely status updates and assist senior team members with metrics related to testing progress.
• Work with senior compliance team members to recommend control improvements and collaborate with management on risk mitigation solutions.
• Review existing controls and determine whether updates are required due to changing regulations, legal obligations, or industry best practices.

The role collaborates with IT control owners, corporate compliance, business process owners, and global assurance teams such as internal audit. This collaboration helps define or refine documented processes for managing and mitigating risk. The position also supports the development of approaches that strengthen the organization’s overall culture of compliance.

Qualifications

• Bachelor’s degree in business, accounting, finance, computer science, information systems, engineering, or a related field.
• 0 to 3 years of experience as an IT auditor or IT risk advisor within a financial institution, public accounting firm, or professional services environment.
• Experience related to IT controls management, IT risk management, IT governance standards, IT policy development, or IT internal audit including information security.
• Professional certifications such as CISA, CISSP, CRISC, or ISO27001 are desirable but not required.
• Understanding of information security practices and industry standards used to design and maintain security controls.
• Exposure to areas such as information security, risk management, privacy and compliance, IT security audit, or technology functions including software development, IT architecture, RPA, or data analytics.
• Familiarity with frameworks such as ISO27001, NIST, COBIT, CFTC, AICPA, ISO/IEC, PCI, or FFIEC is beneficial.
• Experience with governance, risk and compliance (GRC) or audit tools is considered an advantage.

About CME Group

CME Group operates the world’s leading derivatives marketplace. The organization provides opportunities to contribute to global markets while working with experienced professionals across technology, risk, and financial systems. Employees collaborate to solve complex challenges and help shape the future of financial markets.