Cyber Risk Director

Tradeweb; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Tradeweb Markets LLC is seeking a Cyber Risk Manager to lead governance and risk initiatives within the Information Security team. You will drive the risk program, work across technology, business, and vendors, and help mature the enterprise risk framework.

The role requires 10+ years of relevant experience and deep knowledge of NIST, CIS, ISO, and regulatory compliance including GDPR. You will mentor junior staff and communicate complex risks to non-technical stakeholders in a fast-paced

Qualifications

• Clearly articulate cyber risks to stakeholders
• Lead cyber risk–related program activities
• Manage governance within ERMF and policy framework

Responsibilities

• Provide leadership and oversight of Cyber Security risk management, and maintain governance within the company's Enterprise Risk Management Framework
• Manage cyber risk‑related program activities, and ensure effective collaboration within the team, as well as technology, business, and other shareholder groups
• Maintain the cyber‑risk register, control catalogue and its framework mappings, and ensures the controls and policy documentation aligns whilst clearly and concisely articulating cyber‑risks to key stakeholders (technical and non‑technical)
• Maintain and embed an Information Security Policy and management framework across the company that addresses the needs of the company, its staff, and other key stakeholders in line with relevant legislation and industry standards
• Owns the end-to-end process for cyber security related policy & standards creation, management, review and ensures they incorporate regulatory and other requirements
• Own the 3 rd party Cyber Risk Assessments for vendor engagements to ensure that information and Cyber Security risks through third party suppliers are identified and managed appropriately
• Support various internal and external cyber security audit and regulatory exams
• Manage related metrics, KPIs and performance indicators and provide regular updates to the senior management, and the needs of audit, regulator, and risk management purposes
• The role holder helps mentoring junior team members.
• 10 or more years of relevant experience
• Strong knowledge of technology and cyber risks and experience in working and collaborating with cross functional teams leading risk management programs
• Knowledge of common frameworks and standards such as NIST, CIS, ISO
• Knowledge and experience of key legal and regulatory compliance, e.g. GDPR,

Skills

Cyber risk management

Security governance

Cross-functional collaboration

Regulatory knowledge

Job description

Tradeweb is a global leader in electronic trading across asset classes. As financial markets become increasingly interconnected, our technology enables efficient, multi-asset trading on a global scale. We serve more than 3,000 clients in more than 85 countries, including many of the world's largest banks, asset managers, hedge funds, insurers, corporations, and wealth managers.

Creative collaboration and sharp client focus have helped fuel our organic growth. We facilitated average daily trading volume (ADV) of more than $2.8 trillion over the past four fiscal quarters, topping $3.3 trillion in ADV for the first quarter of 2026.

Since our IPO in 2019, Tradeweb has completed four acquisitions and doubled our revenues - and 2025 was our 26th consecutive year of record revenues.

Tradeweb plays a central role in modernizing market structure by developing innovative trading protocols, embedding analytics into execution, and building technology infrastructure that supports the convergence of traditional and digitally native financial markets. Tradeweb is a great place to work, recognized in 2025 by Forbes as one of _America's Best Companies_ and by U.S. News & World Report as one of the _Best Financial Services Companies to Work For_.

Group Details

To capitalize on our success and continued growth plans we are seeking a Cyber Risk Manager.

As a member of the Information Security team, this role will be taking a lead in to help support and expand the existing team, help us assess risks to the firm, deliver our second line assurance program, and support our management of third-party cyber risks. The cyber risk landscape changes constantly and we support a large and varied business that is constantly evolving and growing, so no two days are ever quite the same here and your role will grow and evolve over time.

The role will also have an opportunity to work with subject‑matter experts not only within security, but across infrastructure, network, development, and business teams.

We look to hire people who are comfortable in working with minimal supervision as part of a team that has consistently delivered ground‑breaking and innovative solutions in one of the most exciting and fast‑moving areas of the of the financial markets. We need people who are able to prioritize and can effectively communicate complex issues to non‑technical team members. We would prefer someone who has remediation experience in the Financial Industry, who can meet with our internal partners and present reports with confidence.

Job Responsibilities

• Provide leadership and oversight of Cyber Security risk management, and maintain governance within the company's Enterprise Risk Management Framework
• Manage cyber risk‑related program activities, and ensure effective collaboration within the team, as well as technology, business, and other shareholder groups.
• Maintain the cyber‑risk register, control catalogue and its framework mappings, and ensures the controls and policy documentation aligns whilst clearly and concisely articulating cyber‑risks to key stakeholders (technical and non‑technical)
• Maintain and embed an Information Security Policy and management framework across the company that addresses the needs of the company, its staff, and other key stakeholders in line with relevant legislation and industry standards
• Owns the end-to-end process for cyber security related policy & standards creation, management, review and ensures they incorporate regulatory and other requirements
• Own the 3 rd party Cyber Risk Assessments for vendor engagements to ensure that information and Cyber Security risks through third party suppliers are identified and managed appropriately
• Support various internal and external cyber security audit and regulatory exams
• Manage related metrics, KPIs and performance indicators and provide regular updates to the senior management, and the needs of audit, regulator, and risk management purposes
• The role holder helps mentoring junior team members.
• 10 or more years of relevant experience
• Strong knowledge of technology and cyber risks and experience in working and collaborating with cross functional teams leading risk management programs
• Knowledge of common frameworks and standards such as NIST, CIS, ISO
• Knowledge and experience of key legal and regulatory compliance, e.g. GDPR,

Tradeweb Markets LLC ("Tradeweb") is proud to be an EEO Minorities/Females/Protected Veterans/Disabled/Affirmative Action Employer.

Workplace Posters | U.S. Department of Labor (https://www.dol.gov/general/topics/posters)

As a technology-driven organization, we value individuals who embrace innovation and are eager to leverage emerging technologies, including AI, to improve efficiency, enhance decision‑making, and deliver better outcomes for clients and colleagues. We believe the greatest impact comes from combining technological capabilities with human expertise, judgment, and accountability.