Head of Information Security

Smarkets (Malta) Limited

Job Overview

Location

Chicago

Job Type

Full-time

Full Job Description

📋 Description

• Lead the design, implementation, and maturation of the information security programme for Smarkets’ CFTC-regulated Designated Contract Market (DCM) in Chicago, ensuring compliance with Core Principle 20 under 17 CFR § 38.1050 et seq.
• Establish and enforce security policies and controls to protect the confidentiality, integrity, and availability of critical systems and data across infrastructure, software development, vendor relationships, and end-user operations.
• Own the incident response framework, including detection, containment, reporting, recovery, and root cause analysis procedures for cybersecurity and physical threats.
• Direct the business continuity and disaster recovery programmes to ensure operational resilience during system disruptions or stress events.
• Prepare and maintain documentation for CFTC oversight, including system safeguards records, audit logs, penetration test results, and compliance evidence.
• Serve as the executive lead for cybersecurity audits, control testing, and regulatory examinations by the CFTC, coordinating directly with internal and external auditors.
• Collaborate with engineering, DevOps, product, and risk teams — including UK-based colleagues — to embed secure-by-design practices throughout the software development life cycle.
• Conduct ongoing risk identification, vulnerability management, and cyber threat mitigation across all DCM technology assets.
• Regularly brief the CEO and senior management on security posture, emerging threats, incident trends, and risk levels with clarity for executive and regulatory audiences.
• Build and lead a security function from inception through go-live, scaling the programme as the DCM grows in volume and complexity.
• Ensure alignment of security controls with industry best practices and CFTC expectations for exchange infrastructure, including secure software development and operational resilience standards.
• Manage relationships with geographically distributed engineering and infrastructure teams to maintain consistent security standards across all operational environments.
• Maintain awareness of evolving regulatory requirements for prediction markets and event contracts under the CFTC framework.

🎯 Requirements

• 7+ years of senior-level information security experience, preferably within financial services, exchange infrastructure, or critical regulated systems
• Demonstrated leadership in implementing cybersecurity, compliance, and resilience programmes in high-risk, regulated environments
• Deep familiarity with CFTC Core Principle 20 and 17 CFR § 38.1050 et seq. requirements for system safeguards
• Direct experience with incident response planning and execution, cybersecurity compliance audits, and disaster recovery/business continuity programmes
• Experience managing or collaborating with geographically distributed engineering and infrastructure teams
• Strong understanding of security frameworks and secure software development practices

🏖️ Benefits

• 25 days' annual leave, plus public holidays
• 401(k) plan with 100% company match on employee contributions up to 6% of salary
• Private medical insurance: monthly reimbursement towards a plan of your choice
• Performance bonus of up to 25% of base salary
• Equity via share options scheme
• Annual professional development budget of $1,000 for conferences, training, courses, books, and learning
• Work From Anywhere: up to 20 days per year (pro-rated) to work remotely from locations worldwide

Skills & Technologies

Remote

$130k-200k

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

Smarkets (Malta) Limited

Visit Website

About Smarkets (Malta) Limited

Smarkets operates a peer-to-peer betting exchange that enables users to trade on sports, politics and current events at industry-low commission rates. The London-headquartered company combines exchange technology with risk-management systems to provide transparent pricing, deep liquidity and rapid settlement. Licensed in the UK and Malta, it also offers a mobile trading platform, API access and a same-game parlay product for retail and professional users.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.