AVP Cyber Risk Advisor — Security Strategy & Risk

State Street; Boston (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K with company match

Insurance coverage (medical, dental,视,

Paid time off (vacation, sick leave, F

Employee Assistance Program

Performance-based awards

Tax-advantaged savings plans

Job summary

State Street is seeking an AVP, Cyber Risk Advisor in Boston to strengthen our defensive cybersecurity posture. You will partner with Security Operations, Vulnerability Management, Threat Intelligence, Engineering, Architecture, and AI Security teams to drive risk-informed decisions.

The role combines strong technical cybersecurity knowledge with the ability to influence stakeholders and translate cyber risks into actionable business guidance.

Qualifications

• Strong technical understanding of enterprise networking concepts and security controls.
• Strong experience with network security technologies, secure cloud, Secure SDLC practices
• Experience in securing Software-as-a-Service delivery models (Identity, Data Protection, Monitoring, and Governance)
• Ability to assess architecture diagrams and design documents for security risk.
• Experience in cyber risk assessment, control evaluation, and remediation tracking.
• Strong written and verbal communication skills; able to influence without direct authority.
• Experience in regulated financial services or similarly complex environments.
• Exposure to regulatory expectations (e.g., FFIEC, NIST, ISO, SOC, or equivalent frameworks).
• Experience supporting audits, regulators, or executive risk forums.

Responsibilities

• Assess cyber risks associated with infrastructure, applications, cloud services, third party supply chain, and emerging technologies.
• Assess network designs, material changes, and new initiatives for security risk; review architecture artifacts and control implementations.
• Provide expert guidance on risk acceptance decisions, exception handling, and residual risk posture related to network controls.
• Support execution of enterprise cyber risk management objectives and control improvement initiatives across Saas platforms in support of client deliverables.
• Partner with network and cloud engineering teams to embed security-by-design and resilience principles across on-prem, cloud, and hybrid networks.
• Review and influence network segmentation, trust boundaries, ingress/egress controls, and monitoring strategies.
• Influence the alignment with security patterns with enterprise standards, zero trust principles, and regulatory obligations while working with cyber threat intel to build models.
• Partner with GCS Security Guardians to ensure current network security principals and guidance are updated and documented.
• Lead or support network security risk assessments, control gap analysis, and prioritization aligned to enterprise risk frameworks.
• Track remediation of identified control gaps and provide transparent risk reporting and escalation as needed.
• Support internal audits, regulatory reviews, and risk committees by articulating network security posture and key risks.
• Provide advisory support during cyber incidents and events, including impact analysis, containment strategy guidance, and participate in playbook refinement.

Skills

Enterprise networking security

Network security technologies

Secure SDLC

SaaS security

Architecture risk assessment

Cyber risk assessment

Written and verbal communication

Regulated financial services

Regulatory frameworks

Audits and regulators

Job description

State Street is seeking an AVP, Cyber Risk Advisor in Boston to strengthen our defensive cybersecurity posture. You will partner with Security Operations, Vulnerability Management, Threat Intelligence, Engineering, Architecture, and AI Security teams to drive risk-informed decisions.

The role combines strong technical cybersecurity knowledge with the ability to influence stakeholders and translate cyber risks into actionable business guidance.