Data Protection Security Architect

State Street; Boston (MA); On-site; USD 120,000 - 202,500; Full time

Job summary

State Street in Boston, MA seeks an Information Security Architect with deep data protection expertise to join our security team. The role focuses on building robust architectures and implementing DSPM, CASB, and SSPM in a highly regulated environment.

You will lead data protection strategies for data at rest, in transit, and in use, navigate audits, and collaborate with IT, legal, and compliance to strengthen our security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related fields; master's preferred.
• 7-10 years of information security experience with focus on architecture and data protection.
• Experience in highly regulated industries and understanding of compliance landscapes.
• Certifications such as CISSP, CISM, CISA, CCSP or equivalent.

Responsibilities

• Define, design, and maintain the security architecture for data protection in regulated environments.
• Design and deploy cryptographic solutions and data protection across data at rest, in motion, and in use.
• Ensure compliance with GDPR, HIPAA, PCI-DSS and conduct risk assessments and audits.
• Collaborate with IT, legal, and compliance teams to integrate security measures.
• Stay current with emerging data protection technologies (DSPM, CASB, SSPM) and lead security innovation.

Skills

Cryptography

Data protection

Security architecture

Regulatory compliance

Audits & risk

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related fields

Master’s degree preferred

Tools

DSPM

CASB

SSPM

Cloud security

Job description

State Street in Boston, MA seeks an Information Security Architect with deep data protection expertise to join our security team. The role focuses on building robust architectures and implementing DSPM, CASB, and SSPM in a highly regulated environment.

You will lead data protection strategies for data at rest, in transit, and in use, navigate audits, and collaborate with IT, legal, and compliance to strengthen our security posture.