CISO

Job Description

Job Description

Position Overview

As the independent Administrator of the Consolidated Tape Plan, DataCT LLC ensures the unified administration of Tapes A, B, and C, upholding transparency, reliability, and regulatory integrity across market data operations. The Chief Information Security Officer (CISO) leads the enterprise-wide cybersecurity and risk management program, overseeing Reg SCI, SOC 1/2, ISO 27001, and GDPR compliance frameworks. This role designs and governs the information security strategy, manages vendor security reviews and incident response, and reports the organization’s security posture to the CRO and Board. Through proactive risk assessment, policy enforcement, and continuous improvement, the CISO ensures DataCT’s systems and processes meet the highest standards of confidentiality, integrity, and resilience in support of its market data mission. The role reports to the Head of Legal, Risk and Compliance.

DataCT operates under the independence, governance, and transparency framework established in the CT Plan and the Administrator RFP. All staff are expected to uphold the independence of the Administrator function, avoid actual or perceived conflicts of interest, and support the governance reporting obligations of the Operating Committee of CT Plan LLC.

Core Responsibilities

• Own information security program design and oversight.

• Maintain Reg SCI, SOC1/2, ISO 27001, and GDPR security controls.

• Lead vendor security reviews and incident response.

• Report security posture to the CRO and Board.

Qualifications

• 15+ years in information security leadership.

• Experience with SEC-regulated entities or exchanges/SROs.

• CISSP or equivalent certification preferred.

Location Requirement

This position requires regular, in-person physical presence at DataCT's principal offices in New York City. DataCT's core staff, CT Plan stakeholders, SIP Processors, auditors, and principal service providers are concentrated in the New York metropolitan area, and on-site collaboration is essential to the Administrator function.

Compensation and Benefits

• Base Salary Range - $260,000-280,000 (commensurate with experience, qualifications, skills, education, internal equity, and market data).

• Eligible for performance-based incentives consistent with the role level.

• Compensation is set in accordance with the DataCT Resourcing Experience and Expertise Classification Framework.

• Full benefits package including medical, dental, vision, 401(k) with employer match, life insurance, disability coverage, and paid time off.

Reporting Structure

Reports to: Head of Legal, Risk and Compliance.

About DataCT

DataCT LLC is a Delaware limited liability company headquartered in New York, New York, formed as a single-purpose, independent, member-owned entity to serve as the Administrator of the U.S. Consolidated Tape Plan (the CT Plan). DataCT LLC is responsible for the unified administration of Tapes A, B, and C under the CT Plan, acting on behalf of CT Plan LLC under the Administrator mandate. DataCT is currently engaged under an Interim Services Agreement and is transitioning to the definitive Administrator Services Agreement with CT Plan LLC. The organization is building toward a full operating state of approximately 25 employees and is expected to be fully operational by April 2027.

Equal Opportunity

DataCT LLC is an Equal Opportunity Employer. DataCT is committed to building a diverse and inclusive workforce and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, and related conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, military or veteran status, marital or familial status, citizenship or immigration status, or any other characteristic protected by applicable federal, state, or local law.

DataCT LLC is committed to building a diverse, accountable, and independent organization in service of the CT Plan, its Operating Committee, and the broader U.S. market-data community. The CISO is a key contributor to that mission.

#hc230743