Chief Information Security Officer (CISO) (New York City Metropolitan Area)

Chief Information Security Officer (CISO)

Department: Information Technology & Security

Reporting to: Chief Technology Officer

Location: New York, NY (One State Street Plaza)

Role Type: Hybrid, Full-Time

-------------------------------------------------------------------------------------

About IPC

IPC is a global fintech company delivering cloud-based trading communications and managed connectivity solutions to financial institutions worldwide. Our technology helps clients navigate regulatory change, maintain market access, and improve operational efficiency across global financial markets.

Learn more at

-------------------------------------------------------------------------------------

Overview of the Team

The Information Security function protects IPC's mission-critical trading communications and cloud connectivity platforms, including Connexus, Unigy/Unigy Next, and IPC One, supporting Tier 1 banks, broker-dealers, exchanges, and asset managers globally.

Based in New York, this role leads security teams across EMEA and APAC and partners closely with Engineering, Product, Legal, Compliance, Risk, Sales, Customer Success, and external security providers. The team operates a 24/7 security model and aligns security initiatives with IPC's broader technology roadmap.

-------------------------------------------------------------------------------------

Role Overview

As CISO, you will lead IPC's global information security and technology risk strategy, protecting products, corporate systems, and client data across a hybrid multi-cloud environment.

You will serve as IPC's executive security leader, engaging with the Board, executive team, regulators, clients, and insurers. You will translate cyber risk into business impact, strengthen governance and resilience, embed security into product and engineering delivery, oversee third-party risk, and guide the secure adoption of AI while supporting business growth and client trust.

-------------------------------------------------------------------------------------

Key Responsibilities

• Strategy, governance & cyber-risk quantification

Develop and evolve IPC's security and technology risk program, translating cyber risk into business impact, financial exposure, and investment priorities.

• Board & executive reporting

Provide regular reporting on security strategy, risk, compliance, incidents, resilience, and investment recommendations.

• Client trust & commercial enablement

Support client security reviews, audits, certifications, due diligence, and RFP activities to strengthen trust and business growth.

• Policy & standards

Establish and maintain policies covering data protection, access management, secure development, AI governance, resilience, and third-party risk.

• Regulatory & compliance leadership

Maintain compliance with applicable regulations and frameworks, including NYDFS, FINRA, SEC requirements, DORA, GDPR, ISO 27001, and SOC 2.

• Incident response, disclosure & resilience

Lead incident response, breach management, crisis communications, business continuity, and disaster recovery programs.

• Security architecture & secure delivery

Define security standards across cloud, network, application, identity, and container environments while promoting secure-by-design development.

• Threat & vulnerability management

Oversee threat intelligence, vulnerability management, patching, and security monitoring capabilities.

• Third-, fourth-party & concentration risk

Manage security risks across vendors, cloud providers, outsourcing partners, and managed security services.

• Cyber insurance & incident economics

Partner with Legal, Finance, and Risk on cyber insurance, incident preparedness, and external response capabilities.

• AI governance

Establish governance and controls for the secure and responsible use of AI and LLM technologies.

• Team leadership & security culture

Lead a global security organization and promote a strong security culture across the business.

-------------------------------------------------------------------------------------

How You Will Make an Impact

• Build and execute a scalable enterprise security strategy.
• Maintain a strong compliance and audit-ready posture.
• Lead effective incident response and threat management.
• Develop a high-performing global security team.
• Modernize IPC's security architecture and partner ecosystem.
• Enhance client trust and support renewals, RFPs, and business growth.

-------------------------------------------------------------------------------------

Essential Skills and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• Proven experience as a CISO or senior information security leader.
• Experience within fintech, capital markets, trading technology, or similarly regulated industries.
• Strong expertise in network, application, identity, cloud, and container security, including AWS and Azure.
• Experience leading major security incidents and engaging with regulators, clients, and legal teams.
• Expertise in threat intelligence, vulnerability management, risk assessment, and third-party risk management.
• Knowledge of regulatory and audit frameworks including FINRA, NYDFS, DORA, GDPR, ISO 27001, and SOC 2.
• Ability to align security strategy with business objectives and communicate effectively to executive stakeholders.
• Experience leading global teams and managed-service providers.
• Strong executive presence and Board-level communication skills.

-------------------------------------------------------------------------------------

Desired Skills and Experience

• Advanced degree in Cybersecurity, Information Systems, Business, or related field.
• Certifications such as CISSP, CISM, CISA, CRISC, or CCSP.
• Experience securing cloud-native, SaaS, communications, or mission-critical platforms.
• Experience in private equity-backed, global, or transformation-focused organizations.
• Knowledge of DevSecOps, CI/CD security, software supply-chain security, and policy-as-code.
• Experience with cyber-risk quantification, cyber insurance, and crisis management.
• Understanding of AI/LLM security and governance.
• Experience supporting client due diligence, RFPs, renewals, and security assurance activities.

-------------------------------------------------------------------------------------

What's In It For You?

IPC offers competitive compensation and a comprehensive benefits package, including:

• Competitive salary and bonus
• Medical, dental, and vision coverage
• Employer-paid life and disability insurance
• HSA and FSA programs
• 401(k) with company match
• Flexible PTO and paid holidays
• Enhanced parental leave
• Tuition reimbursement
• Certification bonus program
• IPC University learning platform
• Employee referral program
• Mental health and wellness support
• Volunteer and charitable leave
• Commuter and additional optional benefit programs

-------------------------------------------------------------------------------------

Additional Information

IPC operates a hybrid work model, with employees typically spending approximately 60% of their time in the office and 40% remotely, subject to role and business requirements.

Learn more at:

-------------------------------------------------------------------------------------

IPC's Work Culture

At IPC, we foster an inclusive, innovative, and collaborative culture where diverse perspectives drive better outcomes. Our people are empowered to challenge ideas, embrace innovation, and deliver market-leading