assistant professor (tenure track) - cybersecurity (26-27)

senior financial analyst

ai analyst

assistant professor (tenure track) - cybersecurity (26-27) Jobs in Chicago

cyber security onsite assessor Jobs in Chicago

cyber security onsite assessor

cyber security risk analyst- internship Jobs in Chicago

cyber security risk analyst- internship

cyber security risk analyst internship

Blue Cross Blue Shield

<div>An Internship with the Blue Cross Blue Shield Association (BCBSA) allows you to be part of the foundation that supports Blue Cross and Blue Shield (BCBS) companies nationwide. We seek to improve health care quality, affordability and accessibility for all Americans, and we want you to join the team! Our Summer Internships Include: 10 week paid program during the Summer Challenging real-world, hands-on projects. Mentoring from BCBSA Professionals. Performance Evaluation Process &amp; Presentations. Volunteer Activity, Planned Social Outings and Networking Events. This internship is located in Chicago. This is a hybrid position with 3-4 days in-office.<div></div><ul><li>
Ensure complete confidentiality of company business.</li><li>
Keep management informed about developments within areas of responsibility and handle special projects as needed.</li><li>
Create a final PowerPoint presentation to share with department leadership, summarizing the internship experience, the assigned project, results, and any recommendations for future use .</li><li>
Adhere to HIPAA, Diversity Principles, Corporate Integrity, Compliance Program policies, and other relevant corporate and departmental policies.</li><li>
support vendor risk assessment operations and GRC platform optimization under the supervision of current manager.</li><li>
Backlog of 120+ pending vendor risk assessments creates compliance risk and inefficiency. Resource constraints limit our ability to maintain optimal assessment velocity, timely vendor follow-up, and platform data quality in Whistic and LogicGate.</li><li>
Reduce assessment backlog by 30-40% (40-50 assessments completed)</li><li>
Improve vendor response time from 21 days to 14 days</li><li>
Clean up 100% of identified data integrity issues in GRC platforms</li><li>
Establish systematic business owner engagement framework</li><li>
Delivers immediate operational relief while strengthening BCBSA's cybersecurity talent pipeline and employer brand. Provides hands-on experience in enterprise risk management within healthcare compliance environment, with commitment to meaningful hybrid mentorship (in-office 3-4 days/week).</li></ul><div></div><div>
Financials-We have established a firm hourly rate of $26.00 per hour.<br>
<br>
Education</div><ul><li>
Preferred Bachelor's Degree Pursuing a bachelor&rsquo;s degree</li></ul><div>
Experience</div><ul><li>
1+ Year relevant degree level Required</li></ul><div><br>
Knowledge Skills and Abilities</div><ul><li>
Demonstrated interpersonal skills<br>
Effective communication skills, both verbal and written<br>
Problem-solving and analytical skills<br>
Self-starter with good time management skills<br>
Proactive and eager to learn<br>
Developing computer skills. Experience with Microsoft Excel, Word, PowerPoint and SharePoint preferred.<br>
(Dept to add specific skills required for the project, i.e technical requirements, specific coursework completed, etc.)</li><li>
Extra Posting Information:</li><li><div>
Pursuing degree. minimum GPA of 3.0/4.0</div></li><li><div>
Availability to work ten weeks during the summer</div></li><li><div>
Unrestricted authorization to working the United States (Currently, we are not offering this position with student visa including F1, OPT, CPT or H1B and are not accepting or sponsoring student work visas for this role.</div></li></ul><div></div><div>
#LI-Hybrid</div><div></div><div><div>
The posted salary range is the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the hiring range and this hiring range may also be modified in the future. A candidate&rsquo;s position within the hiring range may be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, relevant experience, skills, seniority, performance, shift, travel requirements, and business or organizational needs. This job is also eligible for <i>annual </i><i>bonus</i><i> </i><i>incentive</i><i> </i>pay.</div></div><div><div>
We offer a comprehensive package of benefits <i>including paid</i><i> time off,</i><i> 11 holidays,</i><i> </i><i>medical/dental/vision</i><i> insurance, </i><i>generous </i><i>401(k)</i><i> matching</i><i>,</i><i> lifestyle spending account</i><i> and </i><i>m</i><i>any other benefits </i>to eligible employees.</div></div><div></div><div><div>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</div></div></div><div></div>

Cyber Security Risk Analyst- Internship

United Airlines

<div>Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.<br>
<br>
Come join us to create what&rsquo;s next. Let&rsquo;s define tomorrow, together.<br>
<h2 class="jobSectionHeader"><b>
Description</b></h2><p>
Connecting People. Uniting the World. There&rsquo;s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world &mdash; with millions of customers and tens of thousands of employees &mdash; we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.</p><p>
We&rsquo;re on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.</p><p>
United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run &quot;Business Resource Group&quot; communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!</p><p><b><br>
Job overview and responsibilities</b></p><ul><li>
Leads the collection, analysis, assessment, and dissemination of open source, and classified information regarding cyber threats and potential attacks within the scope of the United Airlines Cyber Intelligence program</li><li>
This role works with internal business partners and external industry colleagues to identify threats to United and formulate risk assessments, priority intelligence, threat intelligence reports and requests for intelligence information to drive cyber-safe solutions and reduced the cyber-attack surface</li><li>
Prioritize and analyze cybersecurity threats and vulnerabilities to ensure rapid detection, response and remediation to evolving threat actor tactics, techniques and procedures</li><li>
Define and develop processes and tools to track cyber threat intelligence analysis, detection, reporting, documenting, and threat actor profiles</li><li>
Consult with outside parties such as U.S. Government agencies, third-party vendors, and experts to identify and prioritize threats and protections needed</li><li>
Evaluate and recommend strategic changes to improve the collection, maintenance, and utilization of threat intelligence indicators for threat detection engineering enhancements</li><li>
Engage, collaborate and partner with leadership, key collaborators and broader security team on key initiatives to drive day-to-day security operations</li><li>
Act as a trusted advisor to internal and external partners (division leadership, peers, employees)<br>
</li></ul><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><div><h3 class="jobSectionHeader"><b>
What&rsquo;s needed to succeed (Minimum Qualifications):</b></h3><br>
<div></div><ul><li>
Bachelor's degree or 4 years of relevant work experience in Computer Science or other STEM field</li><li>
3+ years of related experience</li><li>
Proficient with cybersecurity tools for areas such as network topologies, intrusion detection, incident response</li><li>
In-depth knowledge of the intelligence cycle</li><li>
Proficient at interpreting and applying finished and raw intelligence</li><li>
Skill in communicating with all levels of management (e.g., interpersonal skills, approachability, effective listening skills, appropriate use of style and language for the audience)</li><li>
Ability to perform in a dynamic environment to strict deadlines, with the ability to address multiple activities concurrently</li><li>
Skills to drive cross-functional initiatives to completion, preferably in complex business environments</li><li>
Ability to communicate in a manner which is understandable by non-technical audiences</li><li>
Ability to achieve objectives by contributing information and recommendations to strategic plans, identifying trends and driving change</li><li>
Must be legally authorized to work in the United States for any employer without sponsorship</li><li>
Successful completion of interview required to meet job qualification</li><li>
Reliable, punctual attendance is an essential function of the position</li></ul><p></p><h3 class="jobSectionHeader"><b><br>
What will help you propel from the pack (Preferred Qualifications):</b></h3><br>
<p></p><ul><li>
Bachelor's degree or 4 years of relevant work experience in Intelligence or Cybersecurity</li><li>
CISSP, GCTI, CCIP, Security+</li><li>
6+ years of related experience in the aviation industry or government</li><li>
Comfortable with scripting or programming languages (C/Python/Ruby/JavaScript)</li><li>
Hands-on experience with processing and analyzing cyber threat intelligence for a large organization</li></ul><p></p><p><br>
Job Posting Expires 4/18/2026</p></div><br>
The base pay range for this role is $112,480.00 to $146,540.00.<br>
The base salary range/hourly rate listed is dependent on job-related, factors such as experience, education, and skills. This position is also eligible for bonus and/or long-term incentive compensation awards.<br>
<br>
You may be eligible for the following competitive benefits: medical, dental, vision, life, accident &amp; disability, parental leave, employee assistance program, commuter, paid holidays, paid time off, 401(k) and flight privileges.<br>
<br>
United Airlines is an Equal Opportunity Employer. We recruit, employ, train, compensate, and promote without regard to race, color, religion, national origin, gender identity, sexual orientation, disability, age, veteran status, or any other protected category under applicable law. We provide reasonable accommodations for applicants and employees with disabilities. To request an accommodation, contact JobAccommodations@united.com</div>

Senior Analyst - Cyber Threat Intel (Remote)

Sargent & Lundy

<div>Description:
<div>
Sargent &amp; Lundy is a leading consulting engineering firm specializing in the power and energy sectors. Since 1891, we have provided comprehensive engineering, design, and consulting services for both traditional and renewable power generation, grid modernization, nuclear power, and beyond. Our mission is to help clients achieve their energy goals effectively by leveraging advanced technologies and adopting sustainable practices.</div><h4 class="jobSectionHeader"><b>
Role Overview</b></h4><div>
Sargent &amp; Lundy is seeking a proactive, data-driven, and detail-oriented Senior GRC Analyst to lead key pillars of Governance, Risk, and Compliance (GRC) with a primary emphasis on enterprise Information Security, TPRM, contract governance, and cross-functional coordination with Legal and Procurement. You will own cyber training, communications, and phishing simulations, and drive measurable outcomes through strong data analysis and dashboard reporting (KPIs/KRIs). You will support audit readiness and regulatory alignment across frameworks such as ISO 27001, SOC 2, NIST CSF/171, and CMMC. You will also guide privacy-aligned practices (e.g., GDPR) and lead effective policy implementation through clear procedures, controls, and adoption plans.</div><p><b>
Essential Responsibilities</b></p><ul><li>
Lead and mature the Third-Party Risk Management (TPRM) program: Develop &amp; manage vendors inventory, conduct risk reviews of third-party vendors, define tiering/scoping, evaluate controls, track obligations/findings through closure, and standardize evidence retention in collaboration with Legal and Procurement.</li><li>
Drive strong contract management with Legal and Procurement: Standardize security and privacy clauses, review S&amp;L client contracts, negotiate requirements, and ensure obligations are tracked, owned, and reported.</li><li>
Own the security awareness &amp; training program end-to-end: Develop curriculum, coordinate communications, execute phishing simulations, analyze outcomes, and improve effectiveness using KPI/KRI dashboards and trend reporting.</li><li>
Administer and optimize GRC platforms and workflows (e.g., Hyperproof) to maintain visibility into risks, assessments, findings, and audit deliverables; establish SLAs and performance indicators.</li><li>
Develop risk management &amp; risk assessment practice, conduct risk assessments, develop and manage risk register with clear tracking of risks and accountability.</li><li>
Advance security governance by drafting, maintaining, and operationalizing policies, standards, procedures, and roles &amp; responsibilities; lead change management and communications to ensure policy implementation and adoption.</li><li>
Coordinate evidence and execute control readiness for ISO 27001, SOC 2, NIST CSF, CMMC (gap analysis, control testing, POA&amp;Ms), and support automation that reduces workload.</li><li>
Support privacy-aligned practices (e.g., GDPR): contribute to data classification/handling standards, data mapping/records of processing, privacy-by-design reviews, incident/breach alignment, and retention practices.</li><li>
Oversee governance for Business Continuity and Disaster Recovery and Backup &amp; Recovery in partnership with IT (plan maintenance, exercises, lessons learned, reporting).</li><li>
Lead cross-functional coordination with IT, HR, Finance, Legal, and business teams to embed compliance into operations and accelerate remediation of findings.</li><li>
 Manage security tasks/projects and report progress via standardized dashboards, scorecards, and executive-ready narratives, highlighting risk, performance, and trends. - Define, publish, and automate metrics &amp; management reporting (KPIs/KRIs) for training effectiveness, phishing trends, vendor risk, audit readiness, privacy/policy adoption, and control performance.</li><li>
Continuously upgrade information security skills, contribute to Information Security team skill development with playbooks, enablement sessions, and knowledge-sharing.</li><li>
 Support government contract compliance reviews and tracking, ensuring obligations are documented, monitored, and evidenced.</li></ul><div></div><div><b><br>
Core Areas of Responsibility (Scope)</b></div><br>
<div></div><ul><li>
 Information Security Governance, Policies, Standards, Procedures, and Roles &amp; Responsibilities.</li><li>
 Risk Management &ndash; Information security risk management and risk assessments</li><li>
Compliance management &ndash; Audit evidence management, audit coordination and compliance monitoring</li><li>
Third Party Risk Management - Third Party Risk Management, Vendor Assessments, Client Contract Reviews and obligation management.</li><li>
Security Awareness &amp; Training &mdash; including communications and phishing simulations: Hoxhunt and Mimecast</li><li>
 Coordination with IT, HR, Finance, Legal, and Business Teams. - Security Tasks/Projects Management.</li><li>
Metrics &amp; Management Reporting &mdash; strong emphasis on data analysis and dashboarding. Information Security Team Skill Development.</li><li>
Government Contract Compliance Reviews and Tracking.</li><li>
Deep Knowledge of Governance &amp; Privacy</li><li>
Policy lifecycle management and control mapping; demonstrated ability to translate policy into procedures/controls and drive organization-wide policy implementation and adoption.</li><li>
Privacy principles and GDPR-aligned practices (e.g., data classification/handling, data mapping/records of processing, privacy by design, incident/breach communications aligned to policy).</li><li>
 Compliance standards and frameworks (ISO 27001, NIST CSF, SOC 2, CMMC).</li><li>
 Third-party risk, software intake governance, audit readiness, and evidence management.</li><li>
Security &amp; TPRM Tools - TPRM platforms: ProcessUnity (Vendor Risk, Contract/Obligations, Issues/Findings tracking). - TPRM intelligence/workflow: OneTrust, BitSight (as applicable).</li><li>
GRC/risk registers: Hyperproof (risk, controls, evidence, audits). - Data analytics and reporting: Power BI and Excel (for KPI/KRI dashboards and executive reporting).</li><li>
Business Continuity and Disaster Recovery Process Oversight. - Backup &amp; Recovery Process Oversight.</li><li>
Mentoring, cross functional team collaboration and executive reporting</li></ul><div></div><p><b><br>
This position offers the flexibility of a hybrid schedule with the expectation of 3 days per week in our downtown Chicago office, and 2 days remote from home.</b></p>
Qualifications:
<h1 class="jobSectionHeader"><b>Required Qualifications</b></h1><ul><li>
 Bachelor&rsquo;s degree in computer science, information systems, or related field; or equivalent professional experience.</li><li>
5+ years in GRC or related domains, including leadership/ownership of programs or workstreams.</li><li>
 Strong understanding of ISO 27001, SOC 2, NIST CSF; experience with CMMC readiness.</li><li>
Practical knowledge of privacy and GDPR with the ability to implement policy via procedures, controls, communications, and training.</li><li>
Proven expertise in risk management, compliance operations, policy/standards, vendor risk, resilience, security training/awareness, and audit readiness.</li><li>
Advanced data analysis skills with the ability to design and maintain KPI/KRI dashboards, translate data into insights, and present executive-ready reporting.</li><li>
Familiarity with security technologies across on-prem and cloud environments; strong problem-solving and systems thinking.</li><li>
Professional certifications (e.g., CISSP, CISM, CRISC) are advantageous.</li></ul><h1 class="jobSectionHeader"><b>
Soft Skills</b></h1><ul><li><b>
Compassionate </b><b>Candor</b>: Provide candid, actionable feedback to enhance team performance and individual growth.</li><li><b>
Seek</b><b> to Understand</b>: Embrace curiosity and a commitment to continuous learning, fostering an environment of collaboration and innovation.</li><li><b>
We Before Me</b>: Actively collaborate and engage diverse perspectives to ensure collective success.</li><li><b>
Do What You Say</b>: Take ownership of commitments, prioritizing and delivering on key initiatives.</li><li><b>
Light Up Learning</b>: Encourage bravery in trying new ideas, sharing failures as opportunities for growth and learning.</li><li><b>
Driven by Passion</b>: Connect personal passion to the mission, demonstrating resilience in the face of challenges while pursuing organizational goals.</li></ul><div></div><div><b><br>
Why Join Us?</b></div><ul><li>
Work in an established company that values innovation and growth.</li><li>
Engage with a collaborative team that is dedicated to making a meaningful impact in the energy sector.</li><li>
Gain exposure to cutting-edge projects and contribute to data-driven decision-making processes.</li></ul><div></div><p><b><br>
We do not sponsor employees for work authorization in the U.S. for this position.</b></p><br>
<p></p>
Award-Winning Benefits:
<p>
At Sargent &amp; Lundy, we care about the health and well-being of our employees. Our commitment extends beyond the workplace, offering comprehensive healthcare plans and generous paid time off to support our team members in every aspect of their lives. We understand the importance of work-life balance, which is why we are proud to provide competitive, award-winning benefits. Our dedication to employee satisfaction has earned us the prestigious Top Workplaces Culture Excellence Award for compensation and benefits in 2022, 2023, and 2024.</p><p></p><div><div><div><b><br>
Health &amp; Wellness</b></div><div><b> Financial Benefits</b></div><div><b> Work-Life Balance</b></div></div><br>
<div><ul><li>
Health Plans: Medical, Dental, Vision</li><li>
Life &amp; Accident Insurance</li><li>
Disability Coverage</li><li>
Employee Assistance Program (EAP)</li><li>
Back-Up Daycare</li><li>
FSA &amp; HSA</li></ul><ul><li>
401(k)</li><li>
Pre-Tax Commuter Account</li><li>
Merit Scholarship Program</li><li>
Employee Discount Program</li><li>
Corporate Charitable Giving Program</li><li>
Tuition Assistance</li><li>
First Professional Licensure Bonus</li><li>
Employee Referral Bonus</li></ul><ul><li>
Paid Annual Personal/Sick Time (PST)</li><li>
Paid Vacation</li><li>
Paid Holidays</li><li>
Paid Parental Leave</li><li>
Paid Bereavement Leave</li><li>
Flexible Work Arrangements</li></ul></div><br>
</div>
Compensation Range: $100,010.00 - $144,190.00 Transparency Statement: Sargent &amp; Lundy discloses compensation ranges that comply with all local and state regulations. The total compensation package for eligible positions will include a base salary or an hourly rate and a comprehensive benefits package, reflecting our commitment to rewarding performance and supporting the overall well-being of our employees. Individuals may also be eligible to participate in our yearly discretionary bonus. Awards &amp; Recognition:
<div></div>
Equal Opportunity:
<div>
Sargent &amp; Lundy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any protected status as defined by applicable law.</div></div>

Senior GRC Analyst

Blue Star Partners LLC

<div><p><b>Job Title:</b><b> </b><b>Security Project Manager &ndash; Government &amp; Insurance</b><br>
<b>Location: </b>Chicago, IL<br>
<b>Work Model:</b> Hybrid (Possibility of travel to NW Indiana and/or Wisconsin)<br>
<b>Rate: </b>$65-$75<br>
<b>Contract Length: </b>6 months (Strong Possibility of Extension)<br>
<b>Employment Type:</b> 1099</p><br>
<p><b>
1. Job Summary</b>
</p><p>The Security Project Manager is responsible for leading the planning, execution, and successful delivery of security-focused initiatives within government and insurance environments. This role ensures projects are delivered on time, within scope, and in compliance with applicable regulatory frameworks, while effectively managing risk and protecting sensitive data, systems, and infrastructure.<br>
</p><p><b>2. Key Responsibilities</b>
</p><ul><li>Lead the full security project lifecycle, from initiation and planning through execution, monitoring, and closure
</li><li>Manage multiple concurrent security projects across cyber and physical security domains
</li><li>Coordinate cross-functional teams, third-party vendors, and client stakeholders to ensure alignment and delivery
</li><li>Ensure compliance with government regulations (e.g., FISMA, FedRAMP, CJIS) and insurance industry standards (e.g., NAIC, PCI DSS, HIPAA, where applicable)
</li><li>Develop and maintain detailed project plans, schedules, budgets, and resource forecasts
</li><li>Identify, assess, and manage project risks; implement mitigation strategies and track remediation efforts
</li><li>Oversee the implementation of security controls, technologies, and remediation initiatives
</li><li>Support incident response planning, tabletop exercises, and post-incident reviews
</li>Prepare and present project status reports, risk summaries, and executive-level briefings to senior leadership<br>
<li>
</li></ul><p><b>3. Required Skills &amp; Competencies</b>
</p><ul><li><b>Security &amp; Technical Knowledge:</b> Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, and security controls related to data protection, identity and access management, and infrastructure security
</li><li><b>Regulatory &amp; Compliance Expertise:</b> Experience working within regulated environments, including government and/or insurance sectors, with knowledge of FISMA, CJIS, NAIC, PCI DSS, and HIPAA
</li><li><b>Project Management:</b> Strong experience managing projects using Agile, Waterfall, or hybrid methodologies; ability to manage scope, schedule, cost, and quality
</li><li><b>Risk Management:</b> Experience conducting risk assessments, supporting threat modeling, vulnerability management, and disaster recovery planning
</li><li><b>Communication &amp; Leadership:</b> Excellent written and verbal communication skills with the ability to translate technical concepts for non-technical audiences
</li><li><b>Stakeholder Management:</b> Proven ability to work effectively within complex, matrixed organizations and navigate politically sensitive environments<br>
</li></ul><p><b>4. Qualifications</b>
</p><ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Systems, or a related field (Master&rsquo;s degree preferred)
</li><li><b>5&ndash;7 years of experience</b> in security project management, with demonstrated experience supporting government and/or insurance clients
</li><li>Professional certifications preferred, such as PMP, CISSP, CISM, or equivalent
</li>Experience working in compliance-driven or highly regulated environments required<br>
<li>
</li></ul><p><b>5. Work Environment &amp; Conditions</b>
</p><ul><li>Hybrid or on-site work model, depending on client and project requirements
</li><li>Ability to obtain and maintain a security clearance may be required for government engagements
</li><li>Occasional travel to client, agency, or project sites</li></ul></div><p></p>

Security Project Manager – Government & Insurance (Contract)

Capgemini

<div><div><div><p>Chicago</p><div>
Strategic Account Cyber Security Leader</div><p>
</p></div></div><p></p><div><div><div><div><div><p>
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.</p><div><div><div><div>
Location</div></div><div><p>
Chicago, USA</p></div></div><div><div><div>
About the Job You're Considering</div></div><div><div>
The Strategic Account Cyber Security Leader owns the end-to-end security strategy, execution, and growth across a strategic account. Responsibilities include:<br>
<ul><li>Leading and delivering complex cybersecurity consulting engagements.</li><li>Driving cybersecurity governance, risk management, compliance, vulnerability management, and incident response.</li><li>Developing and managing the application security (AppSec) program.</li></ul></div></div></div><div><div><div>
Your Role</div></div><div><ul><li>
Strategic Account &amp; Engagement Leadership<br>
<ul><li>Maintain relationships with customer security organization</li><li>Lead selling and delivery of cybersecurity engagements.</li><li>Build business cases and maintain executive-level client relationships.</li><li>Mentor and develop cross-functional teams.</li></ul></li><li>
Cybersecurity Governance &amp; Operations<br>
<ul><li>Establish and mature security governance and policies.</li><li>Oversee vulnerability management and incident response.</li><li>Lead disaster recovery and ISMS-aligned security operations.</li></ul></li><li>
Application Development Security (Program Ownership)<br>
<ul><li>Develop &amp; manage AppSec policies, standards, and procedures.</li><li>Conduct SAST/DAST/IAST, SCA, threat modeling, and penetration testing.</li><li>Train developers on secure coding.</li><li>Partner with engineering to remediate vulnerabilities.</li><li>Manage AppSec tooling and pipeline integrations.</li><li>Participate in AppSec-related incident response.</li><li>Track and report AppSec KPIs/KRIs.</li></ul></li></ul></div></div><div><div><div>
Your Skills and Experience</div></div><div><div>
Essential Skills &amp; Qualifications<br>
<ul><li>Strong understanding of cybersecurity frameworks (NIST, ISO 27001, OWASP).</li><li>Analytical thinking and risk management capability.</li><li>Experience with SDLC and DevSecOps practices.</li><li>Executive presence and ability to influence senior stakeholders.</li><li>Experience leading multi-disciplinary teams.</li></ul></div><p>
Certifications (Preferred)<br>
CISSP, CISM, CSSLP, OSCP/OSWE, CRISC.</p><div><br>
Education &amp; Experience<br>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Engineering, or related field.</li><li>12&ndash;15+ years in cybersecurity with consulting and delivery leadership.</li></ul></div></div></div></div><p>
The base compensation range for this role in the posted location is: $105,070 - $215,050.00 USD per annum.
</p><p>Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.</p><p>
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.</p><p>
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.</p><p>
It is not typical for candidates to be hired at or near the top of the posted compensation range.</p><p>
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.</p><p>
</p><p>Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
</p><ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li></ul><ul><li>
Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li><li>
Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li><li>
Life and disability insurance</li><li>
Employee assistance programs</li><li>
Other benefits as provided by local policy and eligibility</li></ul><p>
Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.</p><p>
</p><p>Disclaimers</p><p>
Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.</p><p>
This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.</p><p>
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.</p><p></p><p><br>
</p><p>Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</p><p>
</p></div></div><div><div><div><div><div>Ref. code</div><div>
439581-en_GB</div></div><div><div>
Posted on</div><div>
18 Mar 2026</div></div><div><div>
Experience level</div><div>
Experienced Professionals</div></div><div><div>
Contract type</div><div>
Permanent</div></div><div><div>
Location</div><div>
Chicago</div></div><div><div>
Business unit</div><div>
Cloud Infrastructure Services</div></div><div><div>
Brand</div><div>
Capgemini</div></div><div><div>
Professional communities</div><div>
Cybersecurity</div></div></div></div></div></div></div></div></div><p></p>

Strategic Account Cyber Security Leader

Northern Trust Corp.

<div><div>About Northern Trust:</div><div></div><div>
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.</div><div></div><div>
Northern Trust is proud to provide innovative financial services and guidance to the world&rsquo;s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world&rsquo;s most sophisticated clients using leading technology and exceptional service.</div><div></div><div>
Technology Risk and Control - Governance and Risk Reporting Lead</div><div></div><div>
Major Duties :</div><div></div><div>
1. Support monthly Technology Risk committee, including preparation for the meetings / stakeholder engagement, facilitation of meetings, production of minutes, tracking of actions / challenge log items and interactions with other committees / working groups.</div><div>
2. Run a Technology Risk advisory forum to triage and vet technology risks. Support escalation of material issues and risks to relevant committees and help to drive informed decision making and robust risk mitigation.</div><div>
3. Maintain agenda and calendar for committee meetings / working groups.</div><div>
4. Support the development and maintenance of monthly Technology Risk Profile reporting, ensuring it provides a clear, decision‑useful view of technology risk posture and trends. Ensure reporting aligns to the Cyber and Technology Risk Management (CTRM) Policy, approved risk taxonomy, and enterprise risk appetite structure.</div><div>
5. Stakeholder Engagement and Cross‑Functional Coordination - Partner closely with Technology Risk &amp; Control, Cyber Risk, Risk Reporting, and Technology leadership to ensure aligned messaging and consistent interpretation of risk data. Act as an escalation point for reporting inconsistencies, data gaps, or material risk concerns identified during reporting cycles. Coordinate inputs and feedback across first‑ and second‑line stakeholders while maintaining appropriate line‑of‑defense boundaries.</div><div></div><div>
Knowledge: Requires excellent communication skills, analytical ability, strong judgment, and the ability to work effectively with IT management and staff, vendors and consultants.</div><div></div><div>
Experience: Bachelor degree in Computer Science or a related discipline and at least six, typically eight or more years experience in risk management and governance related to Technology environments or an equivalent combination of education and work experience.</div><div></div><div>
Salary Range:</div>
$83,100 - 141,300 USD<div></div><div><i>
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life &amp; accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.</i></div><div></div><div>
Working with Us:</div><div></div><div>
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.</div><div></div><div>
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.</div><div></div><div>
We&rsquo;d love to learn more about how your interests and experience could be a fit with one of the world&rsquo;s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater</div><div></div><div>
Reasonable accommodation</div><div></div><div><br>
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at <div>MyHRHelp@ntrs.com</div>.</div><div><br>
<br>
We hope you&rsquo;re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.</div><div></div><div>
Apply today and talk to us about your flexible working requirements and together we can achieve greater.</div></div>

Technology Risk and Control - Governance and Risk Reporting Lead

CME Group

<div><p>CME Group is currently looking for a Global Assurance Audit Summer Intern.
</p><p></p><p>This candidate will assist Global Assurance on day-to-day activities in support of Business and Operations Internal Audits, helping to execute audits and special reviews that provide assurance regarding the existence and effectiveness of financial, operational, compliance, and technology-related internal controls. The intern will develop professional skepticism and obtain knowledge of the business to understand processes, identify, and assess risk. Additionally, they will participate in interviews with our business partners, document test results, and present findings to the team to draw conclusions on the overall level of risk, root causes, and potential solutions.
</p><p></p><p><b>Principal Accountabilities:
</b></p><ul><li>Create accurate, logical and detailed workpapers clearly describing the work performed, results of testing and conclusions reached.
</li><li>Maintain positive and collaborative business relationships with Global Assurance's clients (auditees) to support effective and efficient audit execution.
</li><li>Execute audits to assess the adequacy and effectiveness of internal controls and verify compliance with corporate policies and procedures.
</li><li>Partner with more senior members of the GA team to provide recommendations to management for strengthening controls and work with management to develop acceptable solutions to mitigate risk.
</li><li>Build knowledge of the CME Group's operations, including policies and procedures and any applicable regulatory requirements.
</li><li>Incorporate data analytics and Generative AI tools to enhance audit assurance and streamline documentation.
</li></ul><p></p><p><b>Skills / Software Requirements:
</b></p><ul><li>Basic experience with Google Workspace applications.
</li><li>Experience with data analytics, including visualization and scripting tools (e.g., Tableau, QlikView, Business Objects, SQL, or Python) is a plus.
</li></ul><p></p><p><b>Education:
</b></p><ul><li>Currently pursuing a BA/BS or Master's/Advanced Degree.
</li><li>Desired majors include Accounting or Finance.
</li></ul><p><b>Other Requirements:
</b></p><ul><li>Hybrid Schedule - able to come into the CME Group Chicago Office.
</li><li>Able to work 40 hours per week.
</li></ul><p></p><p><b>Sponsorship Qualifications:
</b></p><ul><li>Please note that our company is unable to provide employment sponsorship for this position and can only consider candidates who are legally authorized to work in the United States without sponsorship assistance (CPT, H1B, F1, L etc.).
</li></ul><p>#EarlyCareers
</p><p></p>CME Group is committed to offering a competitive pay package for our employee interns. The pay range typically applicable to our intern roles is $21.68-$36.10. Actual pay offered will be dependent on a wide array of factors including but not limited to: relevant experience, skills, education, location of the internship, and the internship area of focus. Through our benefits program, we offer our employee interns the opportunity to participate in select offerings. This includes our comprehensive health coverage and a mental health benefit.
<p></p><p><b>CME Group: Where Futures are Made
</b></p><p></p><p>CME Group is the world&rsquo;s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it &ndash; all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we&rsquo;re looking for more.
</p><p></p><p>At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone&rsquo;s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.
</p><p></p><p><b>Important Notice: </b>Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process.</p></div>

Internal Audit - Business and Operations Intern - Summer 2026

Explore 301+ Cyber security risk analyst internship in Chicago this March. Find roles across top companies and apply now to boost your career.