Chief Threat & Vulnerability Operations Leader

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 218,000; Full time

Benefits offered by this job

401K with company match

Paid time off

Volunteer days

Job summary

State Street Corporation seeks a senior leader to head Threat & Vulnerability Operations, scaling a product-led, data-driven security platform across the enterprise. You will own strategy, governance and reporting, while engineering teams own remediation, delivering measurable risk reduction.

You will build a durable operating model for discovery signals, attack-surface reduction and regulatory readiness, partnering with Red Team, Threat Intelligence and engineering leaders to protect the firm

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• Advanced degree preferred.
• Relevant certifications (CISSP, CISM, cloud security, or related) desired.

Responsibilities

• Strategy, Modernization & Transformation: drive modernization of threat and vulnerability capability into a scalable, product-led platform and set transformation roadmap with measurable outcomes.
• Exposure Intelligence, Discovery & Findings Oversight: own exposure picture across signals and govern discovery, validation and remediation governance.
• Reporting, Governance & Regulatory Engagement: stand up reporting services and ensure timely, auditable data for regulators and executives.
• Team Leadership & Build-Out: build and lead the permanent TVO team with product management, compliance and data analytics capabilities.
• Executive & Stakeholder Engagement: advise senior leaders and align with federated delivery across engineering, infrastructure and application teams.

Skills

Threat ops

Vulnerability mgmt

Automation

Executive comms

Product-minded

Data-driven

Education

Bachelor's degree in CS/Info Sec/Engineering

Advanced degree preferred

Job description

State Street Corporation seeks a senior leader to head Threat & Vulnerability Operations, scaling a product-led, data-driven security platform across the enterprise. You will own strategy, governance and reporting, while engineering teams own remediation, delivering measurable risk reduction.

You will build a durable operating model for discovery signals, attack-surface reduction and regulatory readiness, partnering with Red Team, Threat Intelligence and engineering leaders to protect the firm