firewall?
Few simple firewall rules: blocking anything that doesn't access the said stock exchange.
Use proxy for any regular web (and block the social crap site), setup a local mail server and then block the rest. The trader won't need more network access.
Banks are usually flooded by super paranoid "security guys", if they take care VNC alike stuff won't be an issue.