Smarkets - Head of Information Security

• Define and implement the DCM's information security vision, strategy, and programme, consistent with CFTC Core Principle 20 and industry-aligned best practice. • Lead risk identification, vulnerability management, and cyber threat mitigation across all DCM technology assets. • Ensure the design and enforcement of security controls across infrastructure, software development, vendor relationships, and end-user operations. • Own the incident response framework, including procedures for detection, containment, reporting, recovery, and root cause analysis. • Direct the business continuity and disaster recovery programmes, ensuring systems and teams can operate during disruption. • Prepare and maintain system safeguards documentation, audit logs, penetration tests, and other evidence for CFTC oversight and examinations. • Serve as the executive lead for cybersecurity audits, control testing, and CFTC technology compliance. • Collaborate with engineering, DevOps, product, and risk to ensure secure-by-design development and deployment, including across UK-based teams. • Regularly brief the CEO and senior management on security posture, threats, incidents, and risk levels. • Desirable Attributes • Personal interest in sports, exchanges, or trading • Experience securing exchange, clearing, or trading infrastructure. • Relevant certifications such as CISSP, CISM, or equivalent. • Familiarity with event contracts, prediction markets, or similar novel futures products and their treatment under the CFTC framework. • Experience engaging directly with regulators or examiners on technology and system safeguards. • Our Values • Our Values • Make others better • Bring the energy • Our values are at the heart of everything that we do. We believe these are the fundamentals to ensure we are delivering what's expected of us in the best way possible for ourselves and for those around us.