About this role
Job title: Senior Security Leader - CFTC-regulated DCM
About the Role This is a senior security leadership role within Smarkets' CFTC-regulated DCM business unit. You will design, implement, and operate the information security, cybersecurity, and operational resilience program from the ground up as licensing applications go live and scale the business.
What You'll Do
- Define and implement the DCM's information security vision, strategy, and programme in alignment with CFTC Core Principle 20 and industry-aligned best practice.
- Lead risk identification, vulnerability management, incident response planning and execution, and disaster recovery/business continuity programs.
- Embed security across the software development life cycle and infrastructure, coordinating with engineering, risk, and compliance, including UK teams.
- Ensure the DCM can continue operating under stress and coordinate incident response and resilience activities; report to CEO and senior management.
What We're Looking For
- 7+ years of senior-level information security experience, ideally within financial services, exchange infrastructure, or regulated systems.
- Demonstrated leadership in implementing cybersecurity, compliance, and resilience programs in high-risk environments.
- Deep familiarity with CFTC expectations around system safeguards, including Core Principle 20 and 17 CFR § 38.1050 et seq.
- Direct experience with security and risk assessments, incident response planning and execution, cybersecurity compliance audits (internal or regulatory), and disaster recovery and business continuity programs.
- Experience managing or working with geographically distributed engineering and infrastructure teams.
- Strong understanding of security frameworks and secure software development practices.
- Excellent communication and reporting skills, including for executive and regulatory audiences.