Executive Director, Enterprise Data Protection

State Street; Princeton (NJ); Hybrid; USD 170,000 - 282,500; Full time

Job summary

State Street is seeking a Data Protection Managing Director to define and govern the firm’s enterprise-wide data protection program. You will lead a modern, risk-based security program enabling digital, cloud, AI, and data transformation while protecting critical information assets.

The role partners across Security, Engineering, Data, Privacy, Legal, Risk, Compliance, Infrastructure, and Business teams to embed security into platforms, pipelines, and governance.

Qualifications

• Leads enterprise data protection programs and teams.
• Partners with Legal, Compliance, Privacy, and Risk organizations.
• Defines governance for data security strategy across the firm.
• Monitors data risk, remediation progress, and control effectiveness.
• Secures cloud-native data ecosystems and AI security considerations.
• Addresses AI security risks and data protection requirements.

Responsibilities

• Define multi-year data protection strategy aligned with business priorities and regulatory obligations.
• Establish risk-based data lifecycle management including discovery, classification, retention, and access governance.
• Develop executive dashboards and metrics to quantify data risk and protection effectiveness.
• Lead enterprise efforts to inventory sensitive data, credentials, and high-risk data stores.
• Collaborate with AI, Engineering, Security Architecture to deploy secure-by-default AI capabilities.
• Drive modernization initiatives for encryption, key management, and data minimization.

Skills

Executive Leadership

Stakeholder Engagement

Data Protection

AI Security

Cloud Security

Risk Management

Security Architecture

Education

Bachelor's degree in Information Security

Advanced degree preferred

CISSP

CISM

CCSP

CDPSE

Job description

State Street is seeking a Data Protection Managing Director to define and govern the firm’s enterprise-wide data protection program. You will lead a modern, risk-based security program enabling digital, cloud, AI, and data transformation while protecting critical information assets.

The role partners across Security, Engineering, Data, Privacy, Legal, Risk, Compliance, Infrastructure, and Business teams to embed security into platforms, pipelines, and governance.