Head of Horizontal Security Architecture: AI, Data, Crypto

State Street; Quincy (MA); On-site; USD 175,000 - 288,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision insurance

Paid time off

Job summary

State Street seeks a Managing Director, Security Architect to lead horizontal security architecture across AI, data protection, cryptography, and PQC, reporting to the SVP, Data & AI Security. This leader will define unified standards, drive multi-year roadmaps, and ensure secure-by-design patterns across engineering workflows.

The role requires 15+ years in security architecture, with deep crypto expertise and a track record of guiding large, regulated environments.

Qualifications

• 15+ years of experience in security architecture, security engineering, or related disciplines.
• Demonstrated leadership across multiple security domains — AI security, data protection, and cryptography.
• Deep, hands-on expertise in cryptographic architecture and modernization, including PQC transition.
• Proven experience designing and scaling secure cloud-native architectures in large, regulated environments.
• Hands-on experience securing AI/ML and GenAI systems, including governance, data protection, and model risk.
• Strong background in regulatory audits, control remediation, and executive-level risk communication.

Responsibilities

• Define and steward a unified, enterprise-wide security architecture spanning AI Security, Data Protection, Cryptography, and PQC.
• Establish shared architecture standards, guardrails, and reference designs across domains.
• Ensure architectural decisions reinforce other disciplines (data protection, cryptography, AI).
• Set multi-year architectural roadmap aligned with business priorities and regulatory expectations.
• Lead enterprise cryptographic architecture, including encryption, key management, secrets, and machine identity.
• Own PQC strategy and transition roadmap, driving cryptographic agility and inventory (CBOM).
• Partner with Infrastructure and Platform teams to modernize cryptographic hygiene and reduce risk.
• Set enterprise AI security architecture direction for secure-by-default patterns in AI platforms and GenAI tooling.
• Ensure AI threat modeling and controls are integrated with data protection and cryptographic standards.
• Guide AI Security Architecture to deliver coherent controls at scale.
• Define architecture patterns for data discovery, classification, DLP, access governance, and automated protection.
• Align data-centric controls with cryptographic and AI security standards across lifecycle.
• Integrate security architecture into DevSecOps through policy-as-code and paved-road platforms.
• Enable secure adoption of AI, data, and cryptographic capabilities with minimal friction.
• Establish reusable, secure-by-default patterns for product teams.
• Ensure architecture standards align with regulatory expectations (FFIEC, NIST, ISO, NYDFS, GDPR, SEC).
• Serve as credible technical voice in regulatory, audit, and client engagements across four domains.
• Drive data-driven architecture decisions using metrics on coverage and control effectiveness.
• Provide executive briefings on cross-domain security posture and architectural tradeoffs.
• Build and lead a high-performing team of domain architects across AI, Data, and Cryptography.
• Act as a multiplier for security engineering and platform teams.

Skills

Security architecture

Leadership

Cryptography

AI security

Regulatory compliance

Executive communication

Education

Bachelor's degree in CS/Security

Advanced degree preferred

CISSP/CISM/CCSP certifications

Job description

State Street seeks a Managing Director, Security Architect to lead horizontal security architecture across AI, data protection, cryptography, and PQC, reporting to the SVP, Data & AI Security. This leader will define unified standards, drive multi-year roadmaps, and ensure secure-by-design patterns across engineering workflows.

The role requires 15+ years in security architecture, with deep crypto expertise and a track record of guiding large, regulated environments.