Information Security Officer - Vice President

Job Responsibility:

The VP, Information Security Officer provides cyber risk management advisory services to lines of business and legal entities within State Street and sits within the first line of defense and reports into the Global Cybersecurity Organization. The Information Security Officer will align closely with technology teams and be accountable for ensuring teams are implementing cyber controls that conform to technical standards, while ensuring teams have adequate details documented to successfully make it through the security architecture tollgates and application security reviews.

The Information Security Officer will be a strategic change agent that in addition to providing cyber advisory services to the technology teams, will also be a thought leader to protect the bank. Focusing on transformation, the Information Security Officer will assess ways to further strengthen the banks cyber security resiliency controls as they align to the banks critical business services, execution of the cyber controls assurance program, as well as enforcing remediation standards and timelines.

Other Key Responsibilities Include:

• Cyber risk assessment at the application/platform/system levels to identify vulnerabilities and potential threats.
• Designing appropriate cyber controls to remediate risk.
• Overseeing and actively managing risks in line with risk appetite through continuous business unit engagement.
• Strong technical collaboration with application and platform owners.
• Provide expert guidance and recommendations to management on security matters, including risk mitigation strategies and the implementation of security best practices.
• Strong technical expertise in at least two focus areas specifically in Multi-Cloud, AI, Blockchain, Software Supply Chain, and Automation.
• Depth of technical knowledge in network security, product security, data protection, and offensive security measures.
• Good understanding of agile methodology, procedures, and iterative decision making.

Qualifications:

• At least 7 years of progressive cybersecurity experience with 3+ years within financial services.
• 4+ years of operationally focused cybersecurity practitioner
• 2+ years experience working with business leadership across enterprise projects.
• Strong analytical and problem-solving skills, excellent communication (written and verbal) and advisory skills, attention to detail, ability to work independently and in teams, adaptability, and ethical judgment.
• Demonstrate strategic and tactical thinking, along with decision-making skills and business acumen.
• Bachelor's degree in business administration, Information Assurance, or related technical field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), GIAC is highly valued.
• AWS or Azure Cloud Security certification preferable but not required.