Nearly two years after the Securities and Exchange Committee suffered a major data breach, the financial regulatory agency plans to hire a chief risk officer to help shore up its cyber defenses.