Information Security Architect

State Street; Boston (MA); On-site; USD 120,000 - 202,500; Full time

Job summary

State Street in Boston, MA seeks an Information Security Architect with deep data protection expertise to join our security team. The role focuses on building robust architectures and implementing DSPM, CASB, and SSPM in a highly regulated environment.

You will lead data protection strategies for data at rest, in transit, and in use, navigate audits, and collaborate with IT, legal, and compliance to strengthen our security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related fields; master's preferred.
• 7-10 years of information security experience with focus on architecture and data protection.
• Experience in highly regulated industries and understanding of compliance landscapes.
• Certifications such as CISSP, CISM, CISA, CCSP or equivalent.

Responsibilities

• Define, design, and maintain the security architecture for data protection in regulated environments.
• Design and deploy cryptographic solutions and data protection across data at rest, in motion, and in use.
• Ensure compliance with GDPR, HIPAA, PCI-DSS and conduct risk assessments and audits.
• Collaborate with IT, legal, and compliance teams to integrate security measures.
• Stay current with emerging data protection technologies (DSPM, CASB, SSPM) and lead security innovation.

Skills

Cryptography

Data protection

Security architecture

Regulatory compliance

Audits & risk

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related fields

Master’s degree preferred

Tools

DSPM

CASB

SSPM

Cloud security

Job description

Job Summary: We are looking for a highly skilled Information Security Architect with a deep expertise in data protection to join our dedicated information security team. The ideal candidate will have extensive experience in building robust security architectures focused on protecting data both technically and operationally within a highly regulated environment. This role emphasizes the implementation of advanced security frameworks, including cryptography, data protection strategies for data at rest, in motion, and in use, and the deployment of technologies such as Data Security Posture Management (DSPM), Cloud Access Security Brokers (CASB), and Security Service Posture Management (SSPM). The candidate will play a key role in navigating the complexities of audits and compliance initiatives to safeguard our sensitive information.

Key Responsibilities

1. Architectural Design and Implementation
   • Define, design, and maintain the security architecture for data protection, incorporating industry best practices and regulatory requirements.
   • Develop and implement security models and frameworks that support data security across all phases of its lifecycle, including data at rest, in motion, and in use.
2. Data Protection Strategies
   • Design and deploy cryptographic solutions and protocols tailored to protect sensitive data and ensure compliance with industry regulations.
   • Develop and enforce policies for the secure handling, transfer, and storage of data, leveraging solutions like DSPM, CASB, and SSPM.
3. Regulatory Compliance and Risk Management
   • Ensure that all security architectures align with relevant compliance requirements (e.g., GDPR, HIPAA, PCI-DSS) and industry standards.
   • Conduct regular risk assessments and audits of data protection measures, validating their effectiveness and compliance with regulatory demands.
4. Incident Response and Monitoring
   • Collaborate with incident response teams to design procedures and develop response plans for potential data security incidents.
   • Implement continuous monitoring mechanisms for data usage, detecting anomalies in data access patterns for proactive risk management.
5. Collaboration and Stakeholder Management
   • Work closely with IT teams, legal advisors, and compliance officers to integrate security measures smoothly into systems and operations.
   • Engage with stakeholders at all levels to communicate security architecture needs and promote a strong security culture.
6. Thought Leadership and Innovation
   • Stay current with emerging trends, threats, and technologies in data protection and information security.
   • Provide guidance on cutting-edge security technologies and strategies, ensuring that our data protection initiatives leverage the latest advancements in the industry.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related fields. A master’s degree is preferred.
• Experience
  • Minimum of 7-10 years of experience in information security, with a strong focus on security architecture and data protection.
  • Proven experience within a highly regulated industry (financial services, healthcare, government, etc.) and an understanding of its compliance landscape.
• Certifications
  • Relevant certifications such as CISSP, CISM, CISA, CCSP, or similar recognized credentials in cybersecurity and data protection.
• Technical Skills
  • In-depth knowledge of cryptographic methods and data protection architectures.
  • Familiarity with advanced data security frameworks including DSPM, CASB, and SSPM.
  • Strong understanding of network security protocols and practices, cloud security, and information assurance.

Soft Skills

• Exceptional analytical skills and a strong attention to detail.
• Excellent communication and collaboration skills to work with both technical and non‑technical stakeholders.
• Ability to manage multiple projects and priorities in a fast‑paced environment.

Why Join Us

• Join a pioneering organization dedicated to innovative security solutions and data protection.
• Work in a collaborative environment that values creativity and problem‑solving.
• Competitive salary and comprehensive benefits package, including relevant benefits.

Salary Range:

$120,000 - $202,500 Annual

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long‑term disability, and other optional additional coverages; paid‑time off including vacation, sick leave, short‑term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance‑based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax‑advantaged savings plans.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.