Cyber Risk Advisor: Security by Design & Governance

STATE STREET CORPORATION; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health coverage (medical

Paid time off including vacation and s

Employee Assistance Program

Job summary

State Street Corporation is seeking an AVP, Cyber Risk Advisor to strengthen the firm's cyber defense through proactive risk management and design-led security practices. You will partner with Technology, Security Operations, and Engineering to translate complex cyber risks into actionable business guidance.

The role emphasizes risk assessment, control governance, vulnerability reduction, and collaboration with risk, threat intel, and incident response teams to reduce cyber exposure.

Qualifications

• Strong technical understanding of enterprise networking concepts and security controls.
• Experience with network security technologies and secure cloud practices.
• Experience securing Software-as-a-Service delivery models (Identity, Data Protection, Monitoring, Governance).
• Ability to assess architecture diagrams and design documents for security risk.
• Experience in cyber risk assessment, control evaluation, and remediation tracking.

Responsibilities

• Lead cyber risk advisory activities to strengthen defensive posture and manage residual risk.
• Assess risks across infrastructure, applications, cloud services, third-party supply chain, and emerging tech.
• Provide guidance on risk acceptance, exceptions, and remediation strategies.
• Support audits, regulatory reviews, and risk committees with clear risk reporting.

Skills

Enterprise networking concepts

Network security technologies

Secure cloud

SaaS security

Communication skills

Job description

State Street Corporation is seeking an AVP, Cyber Risk Advisor to strengthen the firm's cyber defense through proactive risk management and design-led security practices. You will partner with Technology, Security Operations, and Engineering to translate complex cyber risks into actionable business guidance.

The role emphasizes risk assessment, control governance, vulnerability reduction, and collaboration with risk, threat intel, and incident response teams to reduce cyber exposure.