Cyber Policy Enforcement VP: Risk & Governance

State Street; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Insurance coverage (medical, life, etc

Paid time off

Employee Assistance Program

Performance-based incentive programs

Tax-advantaged savings plans

Job summary

State Street seeks a Cyber Policy Enforcement Lead, VP, to drive enterprise-wide enforcement of cyber policies and standards across the organization. You will coordinate consequences, escalation, and remediation with cybersecurity SMEs, business stakeholders, and senior leadership.

You will define enforceable requirements, monitor performance, and deliver clear reporting to enable informed risk management decisions. A strategic governance role requiring strong cross-functional collaboration.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or related field.
• Master's degree preferred.
• Relevant industry certifications strongly preferred, such as CISSP, CISM, CRISC, CGEIT, CISA.

Responsibilities

• Lead the enterprise Cyber Policy Enforcement and Consequence Management capability across business units.
• Develop and enhance policy enforcement, escalation, and consequence management frameworks and governance mechanisms.
• Partner with Global Cybersecurity, Technology, Risk, Compliance, and business stakeholders to set enforcement priorities and remediation expectations.
• Integrate policy enforcement requirements into business processes, governance forums, and risk management practices.
• Facilitate forums to review compliance performance, remediation progress, and enforcement actions.

Skills

Policy enforcement

Risk management

Governance

Executive reporting

Stakeholder management

Leadership

Education

Bachelor's degree in Cybersecurity/IT

Master's degree preferred

Industry certifications (CISSP, CISM, CRISC, CGEIT, CISA)

Job description

State Street seeks a Cyber Policy Enforcement Lead, VP, to drive enterprise-wide enforcement of cyber policies and standards across the organization. You will coordinate consequences, escalation, and remediation with cybersecurity SMEs, business stakeholders, and senior leadership.

You will define enforceable requirements, monitor performance, and deliver clear reporting to enable informed risk management decisions. A strategic governance role requiring strong cross-functional collaboration.