Product Security Guardian, Vice President

STATE STREET CORPORATION; Greater London; On-site; GBP 110,000 - 170,000; Full time

Job summary

State Street Corporation in London seeks a VP Information Security Officer to provide cyber risk management advisory services to lines of business and legal entities, aligning with technology teams to ensure cyber controls meet standards and pass security reviews.

The role will drive transformation, strengthen cyber resiliency, and manage risk in line with risk appetite while acting as a thought leader to protect the bank, with expertise in multi-cloud, AI, blockchain, software supply chain, and

Qualifications

• 7+ years of progressive cybersecurity experience with 3+ years in financial services.
• Bachelor’s degree in business administration, Information Assurance, or related technical field.
• Professional certifications such as CISSP, CISM, CEH, GIAC are highly valued.
• AWS or Azure Cloud Security certification preferable but not required.

Responsibilities

• Cyber risk assessment at the application/platform/system levels to identify vulnerabilities and potential threats.
• Designing appropriate cyber controls to remediate risk.
• Overseeing and actively managing risks in line with risk appetite through continuous business unit engagement.
• Strong technical collaboration with application and platform owners.
• Provide expert guidance and recommendations to management on security matters, including risk mitigation strategies and the implementation of security best practices.
• Strong technical expertise in Multi-Cloud, AI, Blockchain, Software Supply Chain, and Automation.
• Depth of technical knowledge in network security, product security, data protection, and offensive security measures.
• Good understanding of agile methodology, procedures, and iterative decision making.

Skills

Cyber risk

Cloud security

AI security

Blockchain security

Software supply chain

Automation

Network security

Product security

Data protection

Offensive security

Agile

Education

Bachelor’s degree in business administration

Information Assurance or related technical field

CISSP

CISM

CEH

GIAC

AWS or Azure Cloud Security certification

Job description

Role Overview

he VP, Information Security Officer provides cyber risk management advisory services to lines of business and legal entities within State Street and sits within the first line of defense and reports into the Global Cybersecurity Organization.

The Information Security Officer will align closely with technology teams and be accountable for ensuring teams are implementing cyber controls that conform to technical standards, while ensuring teams have adequate details documented to successfully make it through the security architecture tollgates and application security reviews.

The Information Security Officer will be a strategic change agent that in addition to providing cyber advisory services to the technology teams, will also be a thought leader to protect the bank.

Focusing on transformation, the Information Security Officer will assess ways to further strengthen the banks cyber security resiliency controls as they align to the banks critical business services, execution of the cyber controls' assurance program, as well as enforcing remediation standards and timelines.

Responsibilities

• Cyber risk assessment at the application/platform/system levels to identify vulnerabilities and potential threats.
• Designing appropriate cyber controls to remediate risk.
• Overseeing and actively managing risks in line with risk appetite through continuous business unit engagement.
• Strong technical collaboration with application and platform owners.
• Provide expert guidance and recommendations to management on security matters, including risk mitigation strategies and the implementation of security best practices.
• Strong technical expertise in at least two focus areas specifically in Multi-Cloud, AI, Blockchain, Software Supply Chain, and Automation.
• Depth of technical knowledge in network security, product security, data protection, and offensive security measures.
• Good understanding of agile methodology, procedures, and iterative decision making.

What we value

These skills will help you succeed in this role Strong analytical and problem-solving skills, excellent communication (written and verbal) and advisory skills, attention to detail, ability to work independently and in teams, adaptability, and ethical judgment. Demonstrate strategic and tactical thinking, along with decision-making skills and business acumen.

Education & Preferred Qualifications

• At least 7 years of progressive cybersecurity experience with 3+ years within financial services.
• 4+ years of operationally focused cybersecurity practitioner 2+ years' experience working with business leadership across enterprise projects.
• Bachelor’s degree in business administration, Information Assurance, or related technical field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), GIAC is highly valued.
• AWS or Azure Cloud Security certification preferable but not required.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

Equal Opportunity Employer

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.