SVP, Chief Information Security Officer

Job Description

Building trusted markets —powered by our people.

At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world.

We’re building inclusive ways to support professional and personal development while strengthening the trust we’ve earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to “go for it” and equip our managers with the training to coach their teams to the next level. Our Associate Resource Groups champion diversity, equity and inclusion, giving associates a safe space to network, share ideas and create opportunities.

Reporting to the Chief Risk Officer within the Risk Management and Information Security Department, this senior-level executive is responsible for establishing and maintaining Cboe’s comprehensive information security strategy and program to ensure our information assets and technologies are adequately protected.  The CISO leads the global Information Security team that is responsible for identifying, developing, implementing, and maintaining processes, practices, and tools that mitigate information and technology risks throughout the global enterprise.  The CISO leads incident response efforts and develops, maintains, and monitors compliance with information security-related policies, procedures, and controls.  The CISO regularly provides reports regarding the status of the information security program to executive management, the CGM Board, the CGM Risk Committee, and subsidiary boards. 

Responsibilities 

• Provide strategic leadership of Cboe’s information security program. 

• Promote collaborative, effective security working relationships across Cboe. 

• Implement Cboe’s information security program, including any special tasks or projects requested by regulators, senior management, or the CGM Risk Committee. 

• Develop an annual risk-based information security plan aligned with Cboe’s strategies, objectives, and risk profile, leveraging the enterprise risk management process, as appropriate, for purposes of optimizing resources. 

• Take reasonable steps to guard against loss or compromise of the Company’s critical, valuable, and sensitive information and to effectively detect, respond to, and recover from information security issues. 

• Escalate information security-related risks and risk events in accordance with requirements defined in the Incident Response Information Security Policy. 

• Chair the Security Council (a group of Risk Management and Information Security, Legal, Compliance, Internal Audit, Infrastructure, and Technology/Operations management that meets regularly to discuss and prioritize remediation of information security-related issues and incidents). 

• Complete periodic information security-related risk analyses and risk mitigation processes. 

• Select and implement information security threat mitigation strategies and safeguards. 

• Respond thoroughly and effectively to exam requests from regulators and audit requests from