Senior Data Security Architect: Cloud & Data Governance

State Street; Princeton (NJ); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

Hybrid work model

Job summary

State Street seeks a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, and cybersecurity teams to embed protection controls throughout the data lifecycle.

Ideal candidates bring deep expertise in encryption, key management, data governance, and security frameworks, with a track record in highly regulated financial services settings.

Qualifications

• 13 years or more of experience in data security, security architecture, cloud security, information protection, cryptography, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
• Demonstrated experience designing and implementing enterprise-scale data protection and security architectures in complex global environments.
• Deep expertise in data classification, data protection, encryption, tokenization, masking, privacy controls, data governance, and secure data lifecycle management.
• Strong understanding of cloud data platforms and services across AWS, Microsoft Azure, and Google Cloud Platform.
• Experience securing enterprise data lakes, data warehouses, analytics environments, and large-scale data ecosystems.
• Deep expertise in cryptographic key management systems, Hardware Security Modules (HSMs), enterprise PKI, secrets management platforms, and encryption lifecycle management.
• Experience conducting architecture reviews, threat modeling, risk assessments, and security design evaluations for data-centric platforms and services.
• Familiarity with privacy regulations, data residency requirements, and security frameworks applicable to highly regulated environments.
• Professional certifications such as CISSP, CCSP, CDPSE, CIPP, SABSA, TOGAF, AWS Security Specialty, Azure Security Engineer, or equivalent certifications are highly desirable.
• Experience within financial services or other highly regulated industries is preferred.

Responsibilities

• Design and maintain enterprise data security architectures, standards, and reference patterns across cloud, SaaS, on‑premises, analytics, and hybrid environments.
• Define security requirements and architecture controls for data classification, encryption, tokenization, masking, privacy, retention, secure data sharing, and cryptographic key management.
• Conduct security architecture reviews for data lakes, data warehouses, analytics platforms, cloud data services, enterprise applications, and large‑scale data ecosystems.
• Partner with engineering, cloud, infrastructure, and cybersecurity teams to embed security controls into enterprise data platforms and services.
• Define cryptographic architecture requirements including key management systems (KMS), Hardware Security Modules (HSMs), secrets management platforms, certificate lifecycle management, and encryption standards.
• Assess data security risks and develop mitigation strategies aligned with enterprise security policies and regulatory requirements.
• Provide subject matter expertise on data protection technologies, encryption, key management, cryptographic controls, secure data architectures, and enterprise data governance.
• Evaluate emerging data security technologies, threats, and industry trends to support future‑state architecture strategies.

Skills

Data security architectures

Cloud data platforms

Data protection controls

Cryptographic technologies

Risk assessment

Security reviews

Threat modeling

Tools

KMS

HSMs

PKI

Secrets management

Job description

State Street seeks a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, and cybersecurity teams to embed protection controls throughout the data lifecycle.

Ideal candidates bring deep expertise in encryption, key management, data governance, and security frameworks, with a track record in highly regulated financial services settings.