Capital.com’s Security Hire Signals a Serious AI Infrastructure Bet

TL;DR: Capital.com has named Mariia Erokhina — ex-Pepperstone InfoSec GM and former Sumsub CISO — as VP of IT Operations. The appointment lands as the broker ships AI agent infrastructure for MENA clients and completes a global mobile app overhaul. This is a regulated broker making a deliberate bet that security governance is the load-bearing wall underneath AI-powered trading.

The Appointment and What It Actually Signals

Capital.com confirmed the hire of Mariia Erokhina as Vice President of IT Operations via LinkedIn on June 22, 2026. The title is IT Operations, but the profile behind it is pure security and compliance architecture. Erokhina spent over two years at Pepperstone in Cyprus, finishing as General Manager for Information Security and Compliance — a role that covered security governance frameworks, regulatory alignment, and executive-level risk oversight. Before that, she was Head of IT Security at the same firm, standardizing security controls across Pepperstone’s global footprint.

Prior to Pepperstone, she served as CISO at Sumsub for over two years, building the company’s entire information security function from zero: governance teams, application security, security operations, and multiple external compliance programmes. Her earliest senior role was Senior Business Information Security Officer at Citi, where she worked inside regulated banking environments on risk and control frameworks for roughly three years.

That track record does not describe someone brought in to manage servers. It describes someone brought in to make complex, AI-adjacent infrastructure auditable and defensible to regulators. For anyone following how tier-one forex brokers are staffing their technical leadership, this pattern is worth noting.

What Capital.com Is Actually Building

The timing of this hire is not incidental. Capital.com has simultaneously shipped two meaningful product moves. First, the broker launched a Model Context Protocol (MCP) server plugin for clients in the MENA region, enabling AI agents to connect directly to Capital.com’s systems for both market research and trade execution. MCP is an emerging open standard that lets AI models call external tools and APIs in a structured way — in a trading context, that means an AI agent can, in principle, pull live market data and place orders without a human clicking through a UI.

Second, the company completed a full rebuild of its mobile app, released globally in May 2026. The redesign is not just cosmetic. Capital.com repositioned the product around supporting client decision-making rather than raw execution speed, and every feature was reviewed for its impact on user understanding before action. That framing is consistent with a broker that knows regulators are watching how AI-assisted platforms influence retail trader behavior.

Taken together, the MCP plugin and the app rebuild represent a platform that is actively routing AI into client-facing workflows. Bringing in a CISO-level operator to run IT Operations is the infrastructure response to that product direction.

Why Security Governance Becomes a Marketing Problem

This is the part most forex marketing teams miss. When a regulated broker deploys AI agents that execute trades, the compliance surface area expands dramatically. Regulators in the EU, UK, and MENA want to see audit trails, access controls, and documented risk frameworks around any AI that touches client money. A broker that cannot demonstrate those controls does not get to keep running AI-assisted products — and a broker that loses that permission loses a product differentiator overnight.

For operators running forex lead generation campaigns that funnel traders to platforms like Capital.com, this has a direct downstream effect. If your acquisition funnel points to a broker that regulators pull back on AI features, your conversion rates change and your cost-per-funded-account goes up. The brokers that get AI infrastructure right — and can prove it to regulators — are the ones that retain the product features that make them attractive to convert against.

This is also why paid acquisition campaigns in forex need to be built with platform stability in mind. A broker’s compliance posture is part of the offer. It affects how long landing page claims hold up, how offers can be framed in ad copy, and whether the product you’re sending traffic to exists in the same form six months from now.

What This Means for Forex Operators

Regulated forex brokers are entering a phase where AI is not optional infrastructure — it is becoming a competitive feature set. Capital.com’s MCP plugin is one data point. Expect others to follow with their own AI-native trading tools, particularly in high-growth regions like MENA where regulatory frameworks are still being defined and brokers have more product latitude.

For operators running media buys in the forex space, three things follow from this shift. First, broker differentiation will increasingly hinge on AI tooling rather than spread compression — which means your ad creative needs to speak to decision-support, not just cost. Second, compliance-heavy brokers that invest in security infrastructure will have longer product cycles and more stable offer terms, making them better long-term acquisition partners. Third, platforms that deploy AI agents for lead qualification on the marketing side need to match the same standard of auditability that brokers are now building into their trading infrastructure — regulators will eventually look at the full client acquisition chain, not just the trading platform.

Running precision targeting against the right trader profiles also becomes more valuable in this environment. As AI tools on the broker side get better at retaining and monetizing traders, the quality of the lead at entry matters more. A high-intent, well-qualified deposit is worth considerably more to a broker running AI-assisted client management than a low-quality lead who churns in the first 30 days.

The Broader Pattern: Compliance as Infrastructure Investment

Capital.com’s hire is one visible example of a pattern forming across regulated brokers globally. Firms that want to deploy AI in client-facing contexts — whether for market research, trade execution, or personalized risk warnings — need governance infrastructure that can withstand regulatory scrutiny. That infrastructure is not built by product teams. It is built by executives with Erokhina’s specific background: enterprise security governance, regulatory compliance programmes, and risk frameworks that hold up under external audit.

The MCP plugin Capital.com launched for MENA is a test case. If it clears the regulatory bar in that region, expect the feature to expand globally. If it does not, the security governance framework Erokhina is being hired to build will be what determines how fast the company can remediate and relaunch. Either way, the investment in this type of leadership is a hedge that pays off in either direction.

For operators who want context on how their own acquisition infrastructure compares to the compliance and performance standards that tier-one brokers are now setting, a full marketing audit is the starting point. And for iGaming or crypto operators watching this story from adjacent verticals — the same dynamic applies. iGaming acquisition and crypto lead generation both operate in regulated or semi-regulated environments where the compliance posture of the platform you’re driving traffic to affects your own campaign performance and longevity.

The brokers building serious AI infrastructure are signaling where the market is heading. The operators who track those signals and adjust their acquisition strategy ahead of the curve are the ones who maintain margin when the field resets.

Originally reported by Finance Magnates Executives, June 2026.