Executive Director, Data Protection & Security

State Street; Clifton (NJ); On-site; USD 170,000 - 282,500; Full time

Job summary

State Street is seeking a Data Protection Managing Director to lead the enterprise data protection program. This senior role reports to the SVP of Data and AI Security and balances business enablement with strong security outcomes across data discovery, classification, retention, access governance, encryption and AI security.

The role partners across Security, Engineering, Data, Privacy, Legal, Risk, Compliance and Infrastructure to embed security into platforms, governance, and delivery.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Data Science, or related field.
• Advanced degree preferred.
• CISSP, CISM, CCSP, CDPSE or cloud security certs preferred.

Responsibilities

• Define and execute the multi-year Enterprise Data Protection Strategy.
• Protect sensitive information across lifecycle: discovery, classification, retention, and encryption.
• Develop executive-level metrics quantifying data risk and remediation progress.
• Lead enterprise data protection programs and inventory of data assets and sensitive information.
• Establish AI data security protections against emerging threats and misuse.
• Partner with Security, Engineering, Data, Privacy, Legal, Compliance and Risk teams.

Skills

Executive Leadership

Stakeholder Engagement

Cloud & Data Security

Strategic Thinking

Data Governance

Education

Bachelor's degree in Information Security

Advanced degree preferred

CISSP

CISM

CCSP

CDPSE

Job description

State Street is seeking a Data Protection Managing Director to lead the enterprise data protection program. This senior role reports to the SVP of Data and AI Security and balances business enablement with strong security outcomes across data discovery, classification, retention, access governance, encryption and AI security.

The role partners across Security, Engineering, Data, Privacy, Legal, Risk, Compliance and Infrastructure to embed security into platforms, governance, and delivery.