Product Security Guardian, Vice President

State Street; Greater London; On-site; GBP 140,000 - 190,000; Full time

Job summary

State Street is seeking a VP, Information Security Officer to provide cyber risk management advisory services across lines of business and legal entities. The role aligns with technology teams to ensure cyber controls meet technical standards and pass security reviews, serving as a strategic change agent to strengthen cyber resiliency.

The incumbent will assess risk, design controls, and guide management on mitigation, with emphasis on multi-cloud, AI, and software supply chain security in a

Qualifications

• 7+ years of progressive cybersecurity experience with financial services exposure.
• 3+ years in leadership or advisory roles across enterprise projects.
• Strong analytical, communication, and advisory skills with strategic thinking.

Responsibilities

• Perform cyber risk assessments at application, platform and system levels.
• Design and oversee cyber controls to remediate risk.
• Engage business units to monitor risks within risk appetite.
• Collaborate with application/platform owners on security matters.
• Provide guidance on risk mitigation and best practices.
• Lead focus on cloud, AI, blockchain, software supply chain, and automation.

Skills

Cyber risk assessment

Security controls design

Collaboration with tech teams

Security architecture

Strategic change agent

Multi-Cloud security

AI security considerations

Software supply chain

Network security

Data protection

Education

Bachelor's degree in business administration or information assurance

CISSP

CISM

CEH

GIAC

AWS or Azure Cloud Security certification

Tools

AWS

Azure

Job description

he VP, Information Security Officer provides cyber risk management advisory services to lines of business and legal entities within State Street and sits within the first line of defense and reports into the Global Cybersecurity Organization. The Information Security Officer will align closely with technology teams and be accountable for ensuring teams are implementing cyber controls that conform to technical standards, while ensuring teams have adequate details documented to successfully make it through the security architecture tollgates and application security reviews.

The Information Security Officer will be a strategic change agent that in addition to providing cyber advisory services to the technology teams, will also be a thought leader to protect the bank. Focusing on transformation, the Information Security Officer will assess ways to further strengthen the banks cyber security resiliency controls as they align to the banks critical business services, execution of the cyber controls' assurance program, as well as enforcing remediation standards and timelines.

What You Will Be Responsible For

• Cyber risk assessment at the application/platform/system levels to identify vulnerabilities and potential threats.
• Designing appropriate cyber controls to remediate risk.
• Overseeing and actively managing risks in line with risk appetite through continuous business unit engagement.
• Strong technical collaboration with application and platform owners.
• Provide expert guidance and recommendations to management on security matters, including risk mitigation strategies and the implementation of security best practices.
• Strong technical expertise in at least two focus areas specifically in Multi-Cloud, AI, Blockchain, Software Supply Chain, and Automation.
• Depth of technical knowledge in network security, product security, data protection, and offensive security measures.
• Good understanding of agile methodology, procedures, and iterative decision making.

What We Value

These skills will help you succeed in this role

• Strong analytical and problem-solving skills, excellent communication (written and verbal) and advisory skills, attention to detail, ability to work independently and in teams, adaptability, and ethical judgment.
• Demonstrate strategic and tactical thinking, along with decision-making skills and business acumen.

Education & Preferred Qualifications

• At least 7 years of progressive cybersecurity experience with 3+ years within financial services.
• 4+ years of operationally focused cybersecurity practitioner
• 2+ years' experience working with business leadership across enterprise projects.
• Bachelor's degree in business administration, Information Assurance, or related technical field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), GIAC is highly valued.
• AWS or Azure Cloud Security certification preferable but not required.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job ID: R-778910