MD Chief Info Security Security Officer

Reporting: Global CIO Location: Chicago

Role Overview: The Managing Director and Chief Information Security Officer (CISO) is a high-visibility, global leadership role with the independence and authority to shape the future of the corporation’s security posture. Reporting directly to the Global CIO, you will serve as a key member of the IT Management team and a vital part of the integrated corporate governance structure. You will lead a core information security team and orchestrate cross-functional initiatives to build a resilient, "security-first" culture across the enterprise. This is a mission-critical mandate to design and execute a modern security strategy that enables business innovation while ensuring robust protection against an evolving global threat landscape.

Strategic Accountabilities: ● Strategy, Governance & Architecture: ○ Develop and execute a global information security strategy that aligns with organizational risk objectives and business outcomes. ○ Direct the development of an enterprise-wide security architecture, ensuring "security by design" is integrated across all business units and third-party ecosystems. ○ Establish and maintain corporate-wide information security policies, procedures, and technical standards. ● Risk Management & Operational Resilience: ○ Oversee continuous risk assessments and vulnerability management programs to identify and mitigate threats to the organization’s information assets. ○ Direct the Security Operations Center (SOC) and incident response teams to ensure timely detection, containment, and remediation of security events. ○ Manage the information security budget and capital expenditures to optimize the ROI of security investments. ● Culture, Innovation & Compliance: ○ Serve as a lead advisor on emerging technologies, focusing on the security and ethical implications of AI, Machine Learning, and Cloud migrations (GCP). ○ Drive an enterprise-wide security awareness and training program to foster a culture of shared responsibility. ○ Ensure global compliance with multi-jurisdictional regulations (SEC, CFTC, FCA, AFM) and data privacy standards.

Experience & Expertise: ● Professional Leadership: Minimum 15+ years of leadership experience in information security roles including architecture, risk management, and process design. ● Sector Experience: Minimum of 6+ years within the financial services industry with demonstrated experience navigating regulatory bodies such as the CFTC, FCA, SEC, and AFM. ● Technical Proficiency: Advanced technical aptitude at the level of a business process architect, with specific expertise in Cloud Security Architecture (preferably GCP), DevSecOps methodologies, and securing AI/Machine Learning platforms. ● Compliance & Frameworks: Deep knowledge of US and international information security laws and experience with risk/control frameworks such as SOX, SOC, COSO, CobIT, and ISO 27001. ● Global Team Management: Proven ability to lead and develop large, geographically dispersed teams in fast-paced, agile environments. ● Education & Certification: * Bachelor’s degree in Computer Science or MIS (MBA or MS preferred). ○ Preferred certifications: CISSP, CISA, CISM, or CGEIT, alongside specialized Cloud Security certifications. Core Leadership Competencies: ● Collaborative Influence: Ability to partner and establish trust across organizational boundaries to achieve shared business outcomes. ● Talent Development: Proven track record of managing and growing global organizations through mentorship and clear policy direction. ● Change Leadership: Ability to design and foster a “security-first” operating model during periods of rapid technological evolution. ● Strategic Communication: High-impact negotiation and storytelling skills used to translate complex technical risks into business terms for diverse stakeholders.

CME Group is committed to offering a competitive total rewards package for our employees that recognizes their contributions to the business and reflects our long-term investment in their future. The pay range for this role is $303,100-$505,100. Actual salary offered will be dependent on a wide array of factors including but not limited to: relevant experience, skills, education and comparison to internal employees (where relevant). Our compensation program also includes an annual target bonus opportunity for all employees, as well as the opportunity to become an owner in the company through our broad-based equity program. Through our benefits program, we strive to offer flexibility, value and choice. From comprehensive health coverage, to a retirement package that includes both a 401(k) and an active pension plan, to highly competitive education reimbursement provisions, paid time off and a mental health benefit, CME Group offers a holistic benefits package for our team and their dependents.

CME Group: Where Futures are Made

CME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it – all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.

At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.

Important Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.