Business Information Security Officer-AVP

Cyber Risk Advisory & Oversight

Assess cyber risks associated with infrastructure, applications, cloud services, third party supply chain, and emerging technologies.

Assess network designs, material changes, and new initiatives for security risk; review architecture artifacts and control implementations.

Provide expert guidance on risk acceptance decisions, exception handling, and residual risk posture related to network controls.

Support execution of enterprise cyber risk management objectives and control improvement initiatives across Saas platforms in support of client deliverables.

Security Architecture & Design Influence

Partner with network and cloud engineering teams to embed security‑by‑design and resilience principles across on‑prem, cloud, and hybrid networks.

Review and influence network segmentation, trust boundaries, ingress/egress controls, and monitoring strategies.

Influence the alignment with security patterns with enterprise standards, zero trust principles, and regulatory obligationswhile working with cyber threat intel to build models.

Partner with GCS Security Guardians to ensure current network securityprincipals and guidance are updated and documented.

Vulnerability and Exposure Management

Partner with vulnerability management teams to prioritize remediation activities based on risk.

Analyze vulnerability trends, systemic control weaknesses, and emerging threat exposures.

Provide advisory support on patch management, configuration management, and security hardening efforts.

Assist business and technology teams in developing sustainable remediation strategies.

Risk Assessment & Control Governance

Lead or support network security risk assessments, control gap analysis, and prioritization aligned to enterprise risk frameworks.

Track remediation of identified control gaps and provide transparent risk reporting and escalation as needed.

Support internal audits, regulatory reviews, and risk committees by articulating network security posture and key risks.

Threat and Incident Advisory

Provide advisory support during cyber incidents andevents, including impact analysis, containment strategy guidance, and participate in playbook refinement.

Partner with threat intelligence teams, cyber defense center, and vulnerability management teams to interpret emerging threats, model exposure, and appropriate remediation.

Qualifications and Experience

Strong technical understanding of enterprise networking concepts and security controls.

Strong experience with network security technologies, secure cloud, Secure SDLC practices

Experience in securing Software-as-a-Service delivery models (Identity, Data Protection, Monitoring, and Governance)

Ability to assess architecture diagrams and design documents for security risk.

Experience in cyber risk assessment, control evaluation, and remediation tracking.

Strong written and verbal communication skills; able to influence without direct authority.

Experience in regulated financial services or similarly complex environments.

Exposure to regulatory expectations (e.g., FFIEC, NIST, ISO, SOC, or equivalent frameworks).

Experience supporting audits, regulators, or executive risk forums.

Salary Range:

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.