Head of Information Security

Smarkets

Head of Information Security leading cybersecurity initiatives for CFTC-regulated business unit focused on sports and political trading platform. Ensuring operational resilience and compliance with industry standards.

Posted 7/3/2026full-timeChicago • Illinois • 🇺🇸 United StatesLead💰 $130,000 - $200,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Define and implement the DCM's information security vision, strategy, and programme, consistent with CFTC Core Principle 20 and industry-aligned best practice.
Lead risk identification, vulnerability management, and cyber threat mitigation across all DCM technology assets.
Ensure the design and enforcement of security controls across infrastructure, software development, vendor relationships, and end-user operations.
Own the incident response framework, including procedures for detection, containment, reporting, recovery, and root cause analysis.
Direct the business continuity and disaster recovery programmes, ensuring systems and teams can operate during disruption.
Prepare and maintain system safeguards documentation, audit logs, penetration tests, and other evidence for CFTC oversight and examinations.
Serve as the executive lead for cybersecurity audits, control testing, and CFTC technology compliance.
Collaborate with engineering, DevOps, product, and risk to ensure secure-by-design development and deployment, including across UK-based teams.
Regularly brief the CEO and senior management on security posture, threats, incidents, and risk levels.

Requirements

What you’ll need

Senior security leader with 7+ years of senior-level information security experience, ideally within financial services, exchange infrastructure, or critical regulated systems.
Demonstrated leadership in implementing cybersecurity, compliance, and resilience programmes in high-risk environments.
Deep familiarity with CFTC expectations around system safeguards, including Core Principle 20 and 17 CFR § 38.1050 et seq.
Direct experience with security and risk assessments, incident response planning and execution, cybersecurity compliance audits (internal or regulatory), and disaster recovery and business continuity programmes.
Experience managing or working with geographically distributed engineering and infrastructure teams.
Strong understanding of security frameworks and secure software development practices.
Excellent communication and reporting skills, including for executive and regulatory audiences.

Benefits

Comp & perks

25 days' annual leave, plus public holidays.
401(k) plan: Smarkets matches 100% of employee contributions up to the first 6% of salary.
Private medical insurance: a monthly reimbursement towards the private health insurance plan of your choice.
Performance bonus of up to 25% of base salary.
Equity via share options scheme.
Annual professional development budget of $1,000 for conferences, training, courses, books, and other learning opportunities.
Work From Anywhere: up to 20 days per year (pro-rated) to work remotely from locations around the world.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Cybersecurity StrategyVulnerability ManagementSecurity FrameworksSecure Software DevelopmentDisaster Recovery PlanningRisk AssessmentIncident ResponseCFTC ComplianceSystem Safeguards DocumentationControl Testing

Soft Skills

Excellent CommunicationLeadershipCollaborationReporting Skills