Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)Department: Information Technology & SecurityReporting to: Chief Technology OfficerLocation: New York, NY (One State Street Plaza)Role Type: Hybrid, Full-Time-------------------------------------------------------------------------------------About IPCIPC is a global fintech company delivering cloud-based trading communications and managed connectivity solutions to financial institutions worldwide. Our technology helps clients navigate regulatory change, maintain market access, and improve operational efficiency across global financial markets.Learn more at www.ipc.com-------------------------------------------------------------------------------------Overview of the TeamThe Information Security function protects IPC's mission-critical trading communications and cloud connectivity platforms, including Connexus, Unigy/Unigy Next, and IPC One, supporting Tier 1 banks, broker-dealers, exchanges, and asset managers globally.Based in New York, this role leads security teams across EMEA and APAC and partners closely with Engineering, Product, Legal, Compliance, Risk, Sales, Customer Success, and external security providers. The team operates a 24/7 security model and aligns security initiatives with IPC's broader technology roadmap.-------------------------------------------------------------------------------------Role OverviewAs CISO, you will lead IPC's global information security and technology risk strategy, protecting products, corporate systems, and client data across a hybrid multi-cloud environment.You will serve as IPC's executive security leader, engaging with the Board, executive team, regulators, clients, and insurers. You will translate cyber risk into business impact, strengthen governance and resilience, embed security into product and engineering delivery, oversee third-party risk, and guide the secure adoption of AI while supporting business growth and client trust.-------------------------------------------------------------------------------------Key ResponsibilitiesStrategy, governance & cyber-risk quantificationDevelop and evolve IPC's security and technology risk program, translating cyber risk into business impact, financial exposure, and investment priorities.Board & executive reportingProvide regular reporting on security strategy, risk, compliance, incidents, resilience, and investment recommendations.Client trust & commercial enablementSupport client security reviews, audits, certifications, due diligence, and RFP activities to strengthen trust and business growth.Policy & standardsEstablish and maintain policies covering data protection, access management, secure development, AI governance, resilience, and third-party risk.Regulatory & compliance leadershipMaintain compliance with applicable regulations and frameworks, including NYDFS, FINRA, SEC requirements, DORA, GDPR, ISO 27001, and SOC 2.Incident response, disclosure & resilienceLead incident response, breach management, crisis communications, business continuity, and disaster recovery programs.Security architecture & secure deliveryDefine security standards across cloud, network, application, identity, and container environments while promoting secure-by-design development.Threat & vulnerability managementOversee threat intelligence, vulnerability management, patching, and security monitoring capabilities.Third-, fourth-party & concentration riskManage security risks across vendors, cloud providers, outsourcing partners, and managed security services.Cyber insurance & incident economicsPartner with Legal, Finance, and Risk on cyber insurance, incident preparedness, and external response capabilities.AI governanceEstablish governance and controls for the secure and responsible use of AI and LLM technologies.Team leadership & security cultureLead a global security organization and promote a strong security culture across the business.-------------------------------------------------------------------------------------How You Will Make an ImpactBuild and execute a scalable enterprise security strategy.Maintain a strong compliance and audit-ready posture.Lead effective incident response and threat management.Develop a high-performing global security team.Modernize IPC's security architecture and partner ecosystem.Enhance client trust and support renewals, RFPs, and business growth.-------------------------------------------------------------------------------------Essential Skills and ExperienceBachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).Proven experience as a CISO or senior information security leader.Experience within fintech, capital markets, trading technology, or similarly regulated industries.Strong expertise in network, application, identity, cloud, and container security, including AWS and Azure.Experience leading major security incidents and engaging with regulators, clients, and legal teams.Expertise in threat intelligence, vulnerability management, risk assessment, and third-party risk management.Knowledge of regulatory and audit frameworks including FINRA, NYDFS, DORA, GDPR, ISO 27001, and SOC 2.Ability to align security strategy with business objectives and communicate effectively to executive stakeholders.Experience leading global teams and managed-service providers.Strong executive presence and Board-level communication skills.-------------------------------------------------------------------------------------Desired Skills and ExperienceAdvanced degree in Cybersecurity, Information Systems, Business, or related field.Certifications such as CISSP, CISM, CISA, CRISC, or CCSP.Experience securing cloud-native, SaaS, communications, or mission-critical platforms.Experience in private equity-backed, global, or transformation-focused organizations.Knowledge of DevSecOps, CI/CD security, software supply-chain security, and policy-as-code.Experience with cyber-risk quantification, cyber insurance, and crisis management.Understanding of AI/LLM security and governance.Experience supporting client due diligence, RFPs, renewals, and security assurance activities.-------------------------------------------------------------------------------------What's In It For You?IPC offers competitive compensation and a comprehensive benefits package, including:Competitive salary and bonusMedical, dental, and vision coverageEmployer-paid life and disability insuranceHSA and FSA programs401(k) with company matchFlexible PTO and paid holidaysEnhanced parental leaveTuition reimbursementCertification bonus programIPC University learning platformEmployee referral programMental health and wellness supportVolunteer and charitable leaveCommuter and additional optional benefit programs-------------------------------------------------------------------------------------Additional InformationIPC operates a hybrid work model, with employees typically spending approximately 60% of their time in the office and 40% remotely, subject to role and business requirements.Learn more at:www.ipc.com/careerswww.ipc.com/about-us/about-ipc-------------------------------------------------------------------------------------IPC's Work CultureAt IPC, we foster an inclusive, innovative, and collaborative culture where diverse perspectives drive better outcomes. Our people are empowered to challenge ideas, embrace innovation, and deliver market-leading