Smarkets

Head of Information Security

Chicago

Sponsorship not specified$130k-$200kDetected 19 days ago

DevOpsCybersecurityIncident ResponseRecruitingLeadershipCommunication

About the role

This is a senior security leadership role sitting within our CFTC-regulated business unit, responsible for the information security, cybersecurity, and operational resilience of our Designated Contract Market (DCM).

Lead risk identification, vulnerability management, and cyber threat mitigation across all DCM technology assets.
Ensure the design and enforcement of security controls across infrastructure, software development, vendor relationships, and end-user operations.
Own the incident response framework, including procedures for detection, containment, reporting, recovery, and root cause analysis.
Prepare and maintain system safeguards documentation, audit logs, penetration tests, and other evidence for CFTC oversight and examinations.
Serve as the executive lead for cybersecurity audits, control testing, and CFTC technology compliance.
Collaborate with engineering, DevOps, product, and risk to ensure secure-by-design development and deployment, including across UK-based teams.

Senior security leader with 7+ years of senior-level information security experience, ideally within financial services, exchange infrastructure, or critical regulated systems.
Demonstrated leadership in implementing cybersecurity, compliance, and resilience programmes in high-risk environments.
Deep familiarity with CFTC expectations around system safeguards, including Core Principle 20 and 17 CFR § 38.1050 et seq.
Direct experience with security and risk assessments, incident response planning and execution, cybersecurity compliance audits (internal or regulatory), and disaster recovery and business continuity programmes.
Experience managing or working with geographically distributed engineering and infrastructure teams.
Participation is voluntary, with automatic enrolment at a default contribution rate of 6% unless you select an alternative rate or choose to opt out.

Strong understanding of security frameworks and secure software development practices.
Excellent communication and reporting skills, including for executive and regulatory audiences.

$130,000 to $200,000 USD per year.
The actual offer within this range will depend on experience, qualifications, and other job-related factors.
From day one you will receive:
25 days' annual leave, plus public holidays.
401(k) plan: Smarkets matches 100% of employee contributions up to the first 6% of salary. Participation is voluntary, with automatic enrolment at a default contribution rate of 6% unless you select an alternative rate or choose to opt out.
Performance bonus of up to 25% of base salary.

Performance bonus of up to 25% of base salary.
Equity via share options scheme.
Annual professional development budget of $1,000 for conferences, training, courses, books, and other learning opportunities.
Define and implement the DCM's information security vision, strategy, and programme, consistent with CFTC Core Principle 20 and industry-aligned best practice.
We have designed our benefits offering around Health, Wealth, Lifestyle and Development.
Private medical insurance: a monthly reimbursement towards the private health insurance plan of your choice.
This role is offered subject to satisfactory background screening and, where applicable, CFTC fitness and eligibility requirements.

Participation is voluntary, with automatic enrolment at a default contribution rate of 6% unless you select an alternative rate or choose to opt out.

This listing is sourced directly from Smarkets's careers page and normalized into a canonical job model.