Executive Cyber Risk Leader — Senior BISO (MD)

State Street; Quincy (CA); On-site; USD 170,000 - 283,000; Full time

Job summary

State Street is seeking a MD, Business Information Security Officer (BISO) to act as a senior cybersecurity executive in the first line of defense. You will provide strategic cyber risk leadership and tactical advisory across the enterprise, aligning risk with business objectives and regulatory obligations.

Your role includes leading a team of cyber risk advisors and serving as a liaison between cyber, business, and technology functions.

Qualifications

• 15+ years of progressive cybersecurity, technology risk, or information security experience.
• 8+ years leading cyber risk, cyber advisory, security architecture, security operations, or information security functions.
• Demonstrated experience engaging with executive management, boards, regulators, and external stakeholders.
• Proven record leading large-scale cybersecurity transformation or risk reduction initiatives.
• Strong understanding of financial services, regulatory environments, and cybersecurity frameworks.
• Exceptional communication, executive presentation, and stakeholder management skills.

Responsibilities

• Provide cyber risk leadership to executives, business leaders, and technology services.
• Establish cyber risk governance frameworks across assigned portfolios and ensure risks stay within appetite.
• Translate complex technical risks into clear business impacts and actionable recommendations.
• Lead cyber risk reduction initiatives and risk mitigation priorities with senior governance forums.
• Oversee remediation programs, risk reporting, and control effectiveness across the organization.

Skills

Executive communication

Stakeholder management

Cybersecurity leadership

Executive leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Risk Management, or related field

Job description

State Street is seeking a MD, Business Information Security Officer (BISO) to act as a senior cybersecurity executive in the first line of defense. You will provide strategic cyber risk leadership and tactical advisory across the enterprise, aligning risk with business objectives and regulatory obligations.

Your role includes leading a team of cyber risk advisors and serving as a liaison between cyber, business, and technology functions.