VP, Information Security & Cyber Risk Advisory

State Street; Greater London; On-site; GBP 140,000 - 190,000; Full time

Job summary

State Street is seeking a VP, Information Security Officer to provide cyber risk management advisory services across lines of business and legal entities. The role aligns with technology teams to ensure cyber controls meet technical standards and pass security reviews, serving as a strategic change agent to strengthen cyber resiliency.

The incumbent will assess risk, design controls, and guide management on mitigation, with emphasis on multi-cloud, AI, and software supply chain security in a

Qualifications

• 7+ years of progressive cybersecurity experience with financial services exposure.
• 3+ years in leadership or advisory roles across enterprise projects.
• Strong analytical, communication, and advisory skills with strategic thinking.

Responsibilities

• Perform cyber risk assessments at application, platform and system levels.
• Design and oversee cyber controls to remediate risk.
• Engage business units to monitor risks within risk appetite.
• Collaborate with application/platform owners on security matters.
• Provide guidance on risk mitigation and best practices.
• Lead focus on cloud, AI, blockchain, software supply chain, and automation.

Skills

Cyber risk assessment

Security controls design

Collaboration with tech teams

Security architecture

Strategic change agent

Multi-Cloud security

AI security considerations

Software supply chain

Network security

Data protection

Education

Bachelor's degree in business administration or information assurance

CISSP

CISM

CEH

GIAC

AWS or Azure Cloud Security certification

Tools

AWS

Azure

Job description

State Street is seeking a VP, Information Security Officer to provide cyber risk management advisory services across lines of business and legal entities. The role aligns with technology teams to ensure cyber controls meet technical standards and pass security reviews, serving as a strategic change agent to strengthen cyber resiliency.

The incumbent will assess risk, design controls, and guide management on mitigation, with emphasis on multi-cloud, AI, and software supply chain security in a