Cyber Policy Enforcement Lead, VP

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Medical/dental/vision coverage

Paid time off

Employee assistance program

Performance-based incentives

Job summary

STATE STREET CORPORATION in the United States seeks a Cyber Policy Enforcement Lead, VP, to drive an enterprise capability ensuring cyber policies are consistently enforced across the organization. You will partner with cybersecurity SMEs, business stakeholders, and senior leadership to embed requirements into business processes and define ownership, escalation, and remediation actions.

The role requires a 10+ year track record in cybersecurity or risk management, strong governance knowledge,

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field.
• Master’s degree preferred.
• Certifications such as CISSP, CISM, CRISC, CGEIT, or CISA are strongly preferred.
• 10+ years of progressive cybersecurity, risk, GRC experience in a large organization.
• Strong ability to lead cross-functional initiatives and communicate with senior leadership.

Responsibilities

• Lead enterprise Cyber Policy Enforcement and Consequence Management across units.
• Develop and enhance policy enforcement, escalation, and governance processes.
• Collaborate with Global Cybersecurity, Technology, Risk, Compliance, and business stakeholders.
• Integrate enforcement requirements into business processes and governance forums.
• Prepare executives with reporting on compliance, enforcement, and risk insights.

Skills

Policy enforcement

Governance

Risk management

Executive communication

Stakeholder management

Education

Bachelor’s degree in Cybersecurity / IT / Risk Management

Master’s degree preferred

CISSP

CISM

CRISC

CGEIT

CISA

10+ years in cybersecurity / GRC

Job description

The Cyber Policy Enforcement Lead, VP is responsible for leading the enterprise capability that ensures Cyber Policies and Standards are consistently enforced across the organization. This role drives accountability for cyber compliance through structured enforcement mechanisms, timely risk-based escalation, and managing the consequence management processes. The role serves as the central coordination point for cyber policy enforcement activities, enabling policy and standard requirements are embedded within business processes, ownership is clearly defined, risks are escalated appropriately, and corrective actions are effectively monitored through resolution. The VP partners closely with cybersecurity SMEs, business stakeholders, and senior leadership to define enforceable requirements, monitor performance metrics, identify consequence considerations, and deliver clear reporting that enables informed management decision-making.

Key Responsibilities

• Lead the enterprise Cyber Policy Enforcement and Consequence Management capability, enabling consistent application of Cyber Policy and Standard requirements across business units and functions.
• Develop, implement, and continuously enhance policy enforcement, escalation, and consequence management frameworks, processes, and governance mechanisms.
• Partner with SMEs from Global Cybersecurity, Technology, Risk, Compliance, and Business stakeholders to establish enforcement priorities, remediation expectations, and consequence management activities.
• Drive integration of policy enforcement requirements into business processes, governance forums, and risk management practices.
• Facilitate structured engagement forums to review compliance performance, residual risks, remediation progress, and enforcement actions as applicable.
• Prepare and present compliance, enforcement, and risk insights to senior leadership, risk committees, and governance forums.
• Monitor compliance performance and risk trends, identify systemic issues and root causes, and drive sustainable remediation and continuous improvement.
• Define and track key performance indicators (KPIs) and leverage automation opportunities to enhance monitoring, reporting, and workflow efficiency.
• Conduct periodic reviews and updates of enforceable requirements, monitoring expectations, consequence considerations to ensure continued relevance and effectiveness.

Qualifications & Experience

• Education Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field required.
• Master's degree preferred.
• Relevant industry certifications strongly preferred, such as: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CGEIT (Certified in the Governance of Enterprise IT) CISA (Certified Information Systems Auditor).
• Experience 10+ years of progressive experience in cybersecurity, technology risk, operational risk, governance, risk and compliance (GRC), or related disciplines.
• Demonstrated experience designing and implementing policy enforcement, issue management, escalation, and/or consequence management frameworks within a large, complex organization.
• Strong understanding of cybersecurity governance, risk management, control frameworks, and regulatory expectations within highly regulated industries.
• Experience leading cross-functional initiatives involving cybersecurity SMEs, technology teams, and business partners to achieve risk reduction and compliance objectives.
• Experience managing enterprise-scale stakeholder relationships across business, technology, risk, audit, and executive leadership functions.
• Proven track record of driving accountability and influencing senior stakeholders to address non-compliance, remediate risks, and improve control effectiveness.
• Experience developing and presenting executive-level reporting, risk assessments, metrics, and recommendations to senior management, risk committees, and governance forums.

Salary Range

Salary Range: $120,000 - $202,500 Annual

Benefits

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes:

• our retirement savings plan (401K) with company match
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• eligibility for certain tax advantaged savings plans

About State Street Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.