Technical Cyber Security Advisory, Vice President

State Street Corporation; Greater London; On-site; GBP 140,000 - 200,000; Full time

Job summary

State Street Corporation in London is seeking a Vice President of Cyber Security to act as a senior cyber advisor reporting to the Regional CISO, UK & Ireland. You will drive practical security improvements across business, technology, risk, compliance, and Global Cybersecurity to strengthen cyber resilience.

The role requires translating complex technical risk into actionable remediation plans, coordinating governance forums, and leading regulatory alignment activities for regional to global

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or related discipline preferred; equivalent industry experience will be considered.
• Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or related financial services role.
• Relevant certifications to support experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification.

Responsibilities

• Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters.
• Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews.
• Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization.
• Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking.
• Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability.
• Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership.
• Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes.
• Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner.

Skills

Cybersecurity knowledge

Executive communication

Regulatory awareness

Security architecture

Threat modeling

Offensive security

Risk management

Cloud security

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering/Risk Management

10-15 years cyber security experience

Certifications: CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA

Tools

MITRE ATT&CK

NIST CSF

ISO 27001

CIS Controls

Threat-led pentesting

Vulnerability management

IAM

SIEM/SOAR

EDR

Job description

Who We Are Looking For

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience.

Why This Role is Important To Us

The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities.

This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape.

What You Will Be Responsible For

In this role, you will:

• Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters.
• Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews.
• Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization.
• Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking.
• Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability.
• Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership.
• Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes.
• Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner.

What We Value

These skills will help you succeed in this role:

• We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders
• Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders.
• Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation.
• Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls.
• Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions.
• Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment.
• Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language.
• Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality.

Education & Preferred Qualifications

Degree: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered.

Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role.

Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification.

Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design.

Additional language requirements: N/A.

Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit.

Additional Requirements

Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately.

Work Requirement

Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements.

Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement