Senior Cyber Risk Architect & Advisor

State Street Corp; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401(k) with company match

Health insurance

Paid time off

Employee Assistance Program

Performance-based incentive awards

Job summary

State Street seeks an AVP, Cyber Risk Advisor to strengthen defensive cybersecurity posture through proactive risk management, control oversight, and risk-based remediation. The role partners with Security Operations, Vulnerability Management, Threat Intelligence, and Engineering to drive risk-informed decisions and measurable reductions in cyber exposure.

The candidate will lead or support risk assessments, control governance, and advisory services across SaaS platforms, cloud, and hybrid

Qualifications

• Strong technical understanding of enterprise networking concepts and security controls.
• Experience with network security technologies, secure cloud, and Secure SDLC practices.
• Experience securing Software-as-a-Service delivery models (Identity, Data Protection, Monitoring, and Governance).
• Ability to assess architecture diagrams and design documents for security risk.
• Experience in cyber risk assessment, control evaluation, and remediation tracking.
• Strong written and verbal communication; able to influence without direct authority.
• Experience in regulated financial services or similarly complex environments.
• Exposure to FFIEC, NIST, ISO, SOC or equivalent regulatory frameworks.

Responsibilities

• Assess cyber risks across infrastructure, applications, cloud services, third-party supply chain, and emerging technologies.
• Review architecture artifacts and control implementations for security risk.
• Provide guidance on risk acceptance, exception handling, and residual risk posture for network controls.
• Lead risk assessments, control gaps, and remediation tracking with enterprise alignment.
• Support audits, regulatory reviews, and risk committees by articulating network security posture.

Skills

Networking expertise

Security controls

Secure SDLC

SaaS security

Architecture assessment

Risk governance

Regulatory compliance

Stakeholder influence

Audits & regulators

Job description

State Street seeks an AVP, Cyber Risk Advisor to strengthen defensive cybersecurity posture through proactive risk management, control oversight, and risk-based remediation. The role partners with Security Operations, Vulnerability Management, Threat Intelligence, and Engineering to drive risk-informed decisions and measurable reductions in cyber exposure.

The candidate will lead or support risk assessments, control governance, and advisory services across SaaS platforms, cloud, and hybrid