Career profile
Matthew McCormack
Chief Information Security Officer, Finastra
- Current role, per sources checked 15 October 2026
- November 2025
Matthew McCormack is the Chief Information Security Officer of Finastra, appointed in November 2025.
Career path
McCormack previously served as CSO of EMC, where he was listed among technology leaders speaking at the 2016 Greenwich CIO Executive Leadership Summit.
He later became Chief Information Security Officer at the Defense Intelligence Agency, within the Directorate for Information Management and Chief Information Officer, responsible for the overall cyber protection of the Defense Intelligence Community's global information system infrastructure and for advising the DIA Director and Chief Information Officer on information assurance and cybersecurity matters.
McCormack also worked as a cyber operations contractor at the National Security Agency.
His career has spanned both financial services and government institutions.
He then joined BNY as Managing Director and Chief Information Security Officer in May 2022, a role he held before moving to Finastra.
The CISO appointment at Finastra was announced alongside the hiring of Ali Khan as Chief Data Officer and Sanjay Jain as Chief Information Officer, as the company expanded its technology leadership team.
Remit at Finastra
McCormack leads Finastra's security strategy and frameworks, overseeing the company's enterprise ecosystem and the protection of sensitive financial data.
He is described as having more than 25 years of experience leading security operations at scale, and continues to champion industry practices intended to protect customers and support resilience in a complex threat environment.
Finastra said the new data, information and security roles are intended to drive innovation and trust in global financial services software.
The company provides banking, lending, treasury and capital markets, and payments software to financial institutions.
Certifications
McCormack holds the Certified Information System Security Professional (CISSP), Certified Secure Software Development Lifecycle (CSSLP), and Information Technology Infrastructure Library (ITIL V3) certifications.
