Chief Information Security Officer; CISO

Chief Information Security Officer (CISO)

Department: Information Technology & Security

Reporting to: Chief Technology Officer

Location: New York, NY (One State Street Plaza)

Role Type: Hybrid, Full-Time

-------------------------------------------------------------------------------------

About IPC

IPC is a global fintech company delivering cloud-based trading communications and managed connectivity solutions to financial institutions worldwide. Our technology helps clients navigate regulatory change, maintain market access, and improve operational efficiency across global financial markets.

Learn more at

-------------------------------------------------------------------------------------

Overview of the Team

The Information Security function protects IPC's mission-critical trading communications and cloud connectivity platforms, including Connexus, Unigy/Unigy Next, and IPC One, supporting Tier 1 banks, broker-dealers, exchanges, and asset managers globally.

Based in New York, this role leads security teams across EMEA and APAC and partners closely with Engineering, Product, Legal, Compliance, Risk, Sales, Customer Success, and external security providers. The team operates a 24/7 security model and aligns security initiatives with IPC's broader technology roadmap.

-------------------------------------------------------------------------------------

Role Overview

As CISO, you will lead IPC's global information security and technology risk strategy, protecting products, corporate systems, and client data across a hybrid multi-cloud environment.

You will serve as IPC's executive security leader, engaging with the Board, executive team, regulators, clients, and insurers. You will translate cyber risk into business impact, strengthen governance and resilience, embed security into product and engineering delivery, oversee third-party risk, and guide the secure adoption of AI while supporting business growth and client trust.

-------------------------------------------------------------------------------------

Key Responsibilities

• Strategy, governance & cyber-risk quantification

Develop and evolve IPC's security and technology risk program, translating cyber risk into business impact, financial exposure, and investment priorities.

• Board & executive reporting

Provide regular reporting on security strategy, risk, compliance, incidents, resilience, and investment recommendations.

• Client trust & commercial enablement

Support client security reviews, audits, certifications, due diligence, and RFP activities to strengthen trust and business growth.

• Policy & standards

Establish and maintain policies covering data protection, access management, secure development, AI governance, resilience, and third-party risk.

• Regulatory & compliance leadership

Maintain compliance with applicable regulations and frameworks, including NYDFS, FINRA, SEC requirements, DORA, GDPR, ISO 27001, and SOC 2.

• Incident response, disclosure & resilience

Lead incident response, breach management, crisis communications, business continuity, and disaster recovery programs.

• Security architecture & secure delivery

Define security standards across cloud, network, application, identity, and container environments while promoting secure-by-design development.

• Threat & vulnerability management

Oversee threat intelligence, vulnerability management, patching, and security monitoring capabilities.

• Third-, fourth-party & concentration risk

Manage security risks across vendors, cloud providers, outsourcing partners, and managed security services.

• Cyber insurance & incident economics

Partner with Legal, Finance, and Risk on cyber insurance, incident preparedness, and external response capabilities.

• AI governance

Establish governance and controls for the…