CISO / Senior Infosec Engineer at Smarkets Limited
- Location
- London, United Kingdom
- Compensation
- Not Disclosed + Equity
Smarkets Limited is looking for its first CISO / Senior Infosec Engineer to own security for a platform that has processed over £29 billion in volume. This is a rare 'builder' role where you’ll architect a cloud-native security program from scratch while leading the company’s expansion into US CFTC-regulated markets.
You’ll work with a high-performance stack of Rust and Kubernetes, enjoying a flat, self-managing culture and a direct line to the Board. If you’re a hands-on security leader who excels at bridging DevSecOps with rigorous financial regulatory standards, this is your opportunity to define the security DNA of a major fintech player.
What's the next step?
Smarkets Limited are hiring from Jack's network. Talk to Jack for free and get a direct introduction to the team, if a good fit.
Role overview
As the inaugural security hire at Smarkets Limited, you will build and own the information security program from the ground up. You’ll bridge engineering and compliance, securing real-time trading engines and cloud-native AWS environments while navigating CFTC regulatory mandates. This high-impact role reports directly to senior leadership and the Board.
About Smarkets Limited
Finance · 100+ employees
Smarkets Limited operates a betting exchange and prediction market platform, allowing users to bet directly with others on sporting events, political elections, and current affairs with industry-disrupting odds and low commissions. Headquartered in London, it processes billions in traded volume annually and also offers the SBK sportsbook app.
What you will do
- Architect and implement a robust cloud-native security framework on AWS, integrating DevSecOps best practices and automated security tooling directly into CI/CD pipelines to ensure seamless, secure software delivery.
- Establish and manage the regulatory compliance program for DCM and DCO entities, ensuring adherence to CFTC system safeguards (§ 38.1051 and § 39.18), ISO 27001, and NIST SP 800-53 standards.
- Lead threat modeling, incident response, and risk assessment initiatives, providing critical updates to the Board on cybersecurity posture while fostering a company-wide culture of security advocacy and awareness.
Who this is a fit for
- Proven track record in security engineering, with hands-on experience securing Kubernetes workloads, AWS infrastructure, and building automated security pipelines within a high-growth, technically demanding environment.
- Extensive experience navigating financial regulations, specifically within CFTC, FCA, or similar frameworks, and the ability to translate complex regulatory requirements into practical, engineering-led security controls and policies.
- A builder mindset with the leadership maturity to act as a primary advisor to executive management while remaining deeply technical enough to own incident response and architectural design.
Why this role is remarkable
- Inaugural security leadership: You are the first security hire, giving you full autonomy to build the security roadmap, select the tooling, and define the culture of protection for a high-volume trading platform.
- Deep technical challenge: Work with a sophisticated stack including Rust, Kubernetes, and Nix-based CI to protect distributed, real-time systems that have handled over £29 billion in betting volume since inception.
- Radical culture and influence: Join a company known for its flat structure and radical transparency, enjoying a direct line to the Board while shaping security for new US CFTC-regulated market expansions.
How Jack & Jill work together
What happens next?
Jack’s an AI agent for job searching and career coaching. He works for you.
Jill is the AI recruiter working for the company. She recruits from Jack’s network.
If your profile’s a match and Smarkets Limited wants to meet, Jill will make the intro. In the meantime, Jack will send you excellent alternatives.