Vermiculus Appoints Alexander Kilian as CISO to Bolster Market Infrastructure Security

Vermiculus has appointed Alexander Kilian as its Chief Information Security Officer (CISO) to formalize its security and compliance operations. For fintech professionals, this move signals a deepening focus on cyber resilience within market infrastructure, ensuring that high-stakes trading and clearing environments remain secure as the firm scales its global technology footprint.

What was announced

The appointment of Alexander Kilian as Chief Information Security Officer (CISO) marks a formalization of the security and compliance frameworks at Vermiculus. While Kilian has been with the firm since its early stages, this new role centralizes his oversight of Governance, Risk, and Compliance (GRC) across the organization. His responsibilities include managing Third-Party Risk Management (TPRM) reviews, overseeing security requirements for customer projects, and establishing AI governance protocols.

Kilian brings over three decades of IT experience to the position, including 25 years specifically within the financial technology sector. His tenure at Vermiculus has seen him play a central role in technical integration and resilience for some of the world’s largest market operators. Specifically, he has contributed to major infrastructure projects for the Japan Exchange Group (JPX), the Australian Securities Exchange (ASX), the London Metal Exchange (LME), and The Options Clearing Corporation (OCC).

The role is designed to bridge the gap between back-end security and customer-facing delivery. By combining CISO duties with his existing technical work, Kilian will ensure that security and cyber resilience are baked into the design and deployment of the company’s trading, clearing, and CSD solutions. This coordination is intended to strengthen the company's established work in security, which has long been a component of its technology and operations.

"I am honored to take on the role of CISO and look forward to building on the solid foundation already in place alongside the strong team at Vermiculus. Our customers operate in mission-critical environments where security and cyber resilience are essential. Security and innovation must advance together. Combining my responsibilities as CISO with the customer-facing work I already do will help connect these requirements with how we design and deliver our solutions."

Alexander Kilian, Chief Information Security Officer at Vermiculus

The companies involved

Vermiculus operates as an independent provider of technology for the global market infrastructure sector. The firm specializes in developing high-performance systems for trading, clearing, and Central Securities Depository (CSD) operations. Its technology is built to handle a diverse range of asset classes and investment products, catering to the evolving needs of modern exchanges and clearinghouses.

Led by CEO Taraneh Derayati, the company has positioned itself as a provider of flexible, mission-critical solutions that can adapt to rapid market changes. The leadership team and technical staff often draw on deep industry roots; for instance, Alexander Kilian’s professional background includes significant roles at OM—a firm that eventually became part of Nasdaq—as well as Cinnober Financial Technology. This pedigree is a hallmark of the company’s approach, emphasizing a hands-on understanding of the complex environments that support global financial markets. By maintaining independence, Vermiculus aims to offer an alternative to legacy providers, focusing on agility and the integration of modern technological standards within traditional financial frameworks.

What FF News has reported before

FF News has previously tracked the expansion of the Vermiculus product suite as the firm moves into specialized areas of market operations. In late 2026, the company announced the launch of Vermiculus Launches AI-Powered VeriAct to Revolutionize Corporate Action Processing, a system designed to automate complex corporate action workflows using artificial intelligence.

Earlier that year, the firm also addressed the growing intersection of traditional finance and digital assets. We reported on how Vermiculus Deploys 24/7 VeriClear Solution for Global Crypto Exchange Prediction Markets, highlighting the company’s ability to provide real-time clearing services for the 24/7 crypto trading environment. These developments underscore the firm's strategy of applying institutional-grade resilience to emerging asset classes and automated processes.

What this means

The formalization of the CISO role at a mid-sized infrastructure provider like Vermiculus reflects a broader industry shift where security is no longer a back-office function but a core product requirement. As exchanges and clearinghouses face intensifying regulatory scrutiny and sophisticated cyber threats, the "security-by-design" approach is becoming the minimum standard for entry. This move puts pressure on legacy technology providers who may struggle to retrofit modern resilience into aging codebases. It also raises questions about how quickly the sector can standardize AI governance, as firms increasingly integrate machine learning into mission-critical workflows. For the market, the priority is now clear: innovation is worthless without proven, integrated resilience.