CISO

Job Description

Job Description

Position Overview

As the independent Administrator of the Consolidated Tape Plan, DataCT LLC ensures the unified administration of Tapes A, B, and C, upholding transparency, reliability, and regulatory integrity across market data operations. The Chief Information Security Officer (CISO) leads the enterprise-wide cybersecurity and risk management program, overseeing Reg SCI, SOC 1/2, ISO 27001, and GDPR compliance frameworks. This role designs and governs the information security strategy, manages vendor security reviews and incident response, and reports the organization’s security posture to the CRO and Board. Through proactive risk assessment, policy enforcement, and continuous improvement, the CISO ensures DataCT’s systems and processes meet the highest standards of confidentiality, integrity, and resilience in support of its market data mission. The role reports to the Head of Legal, Risk and Compliance.

DataCT operates under the independence, governance, and transparency framework established in the CT Plan and the Administrator RFP. All staff are expected to uphold the independence of the Administrator function, avoid actual or perceived conflicts of interest, and support the governance reporting obligations of the Operating Committee of CT Plan LLC.

Core Responsibilities

• Own information security program design and oversight.

• Maintain Reg SCI, SOC1/2, ISO 27001, and GDPR security controls.

• Lead vendor security reviews and incident response.

• Report security posture to the CRO and Board.

Qualifications

• 15+ years in information security leadership.

• Experience with SEC-regulated entities or exchanges/SROs.

• CISSP or equivalent certification preferred.

Location Requirement

This position requires regular, in-person physical presence at DataCT's principal offices in New York City. DataCT's core staff, CT Plan stakeholders, SIP Processors, auditors, and principal service providers are concentrated in the New York metropolitan area, and on-site collaboration is essential to the Administrator function.

Compensation and Benefits

• Base Salary Range - $260,000-280,000 (commensurate with experience, qualifications, skills, education, internal equity, and market data).

• Eligible for performance-based incentives consistent with the role level.

• Compensation is set in accordance with the DataCT Resourcing Experience and Expertise Classification Framework.

• Full benefits package including medical, dental, vision, 401(k) with employer match, life insurance, disability coverage, and paid time off.

Reporting Structure

Reports to: Head of Legal, Risk and Compliance.

About DataCT

DataCT is the regulatory administrator for consolidated U.S. equity market data, entrusted with overseeing the collection, processing, and dissemination of market information that supports fair, transparent, and efficient markets.Leveraging the proven expertise developed through decades of leadership within Nasdaq's and NYSE's market data organizations, DataCT is positioned to modernize the consolidated data infrastructure for the next generation of market participants. Through innovation, operational excellence, and a commitment to transparency, DataCT helps ensure that investors and industry stakeholders have access to trusted market data that promotes confidence in the U.S. equity markets.DataCT LLC is a Delaware limited liability company headquartered in New York. Equal Opportunity DataCT LLC is an Equal Opportunity Employer. DataCT is committed to building a diverse and inclusive workforce and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, and related conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, military or veteran status, marital or familial status, citizenship or immigration status, or any other characteristic protected by applicable federal, state, or local law.DataCT LLC is committed to building a diverse, accountable, and independent organization in service of the CT Plan, its Operating Committee, and the broader U.S. market-data community. The CISO is a key contributor to that mission.

#hc230743