Chief Information Security Officer

Company overview

Role overview

Key responsibilities

• Define and execute group-wide cybersecurity strategy aligned with growth and regulatory requirements.
• Oversee security governance frameworks, policies, and controls across entities and jurisdictions.
• Lead threat detection, incident response, and cyber risk management for trading systems and digital platforms.
• Secure trading infrastructure, including low-latency systems, APIs, and client-facing platforms.
• Oversee cloud, network, and application security across distributed environments.
• Embed security in systems and processes with Technology, Product, Compliance, Risk, and Operations teams.
• Manage security operations, penetration testing, vulnerability management, and red teaming.
• Ensure compliance with relevant regulatory frameworks and cybersecurity standards.
• Lead third-party risk assessments, including for liquidity providers, PSPs, and technology partners.
• Report cybersecurity posture, risks, and incidents to senior leadership and the board.
• Build and lead a global security team.

Requirements

• Proven experience as a CISO, Head of Information Security, or equivalent leader.
• Strong background in financial services, brokerage, fintech, payments, or digital assets/crypto.
• Deep understanding of trading platforms, financial systems, and real-time infrastructure risks.
• Experience in regulated, multi-jurisdictional environments.
• Strong cybersecurity framework knowledge, including ISO 27001, NIST, or CIS.
• Hands-on cloud experience with AWS, Azure, or GCP and modern security architectures.
• Experience managing security incidents, breaches, and crisis response.
• Ability to operate strategically and technically, and engage C-level executives and regulators.
• CISSP, CISM, CISA, or similar certification is preferred.

Relevant frameworks and regulations

• Examples named include DFSA, FCA, ASIC, MiCA, GDPR, ISO 27001, NIST, and CIS.