Senior Data Security Architect - Data Protection Leader

State Street; Austin (TX); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Health insurance

Paid time off

Employee Assistance Program

Annual performance-based bonuses

Tax-advantaged savings plans

Job summary

State Street is seeking a Senior Data Security Architect to design, review, and govern security architectures for data across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, cybersecurity, and business teams to ensure data protection controls are embedded throughout the data lifecycle.

Responsibilities include defining cryptographic key management, encryption, tokenization, data masking, privacy controls, and secure

Qualifications

• Experience designing enterprise-scale data protection architectures.
• Deep knowledge of cloud data platforms and encryption strategies.
• Experience with data governance and secure data lifecycle management.
• Familiarity with regulatory requirements in financial services.

Responsibilities

• Design and govern data security architectures across cloud, on‑prem, and hybrid environments.
• Define security requirements for data classification, encryption, masking, and key management.
• Conduct architecture reviews for data lakes, warehouses, and analytics platforms.
• Embed security controls with data engineering, cloud, and cybersecurity teams.
• Assess risks and develop mitigation aligned with policies and regulations.
• Provide expertise on cryptographic controls and enterprise data governance.

Skills

Data security architecture

Cloud security

Risk assessment

Cryptography

Data governance

Education

Professional certifications such as CISSP, CCSP, CDPSE, CIPP, SABSA, TOGAF, AWS Security Specialty, Azure Security Engineer

Tools

KMS

HSMs

Secrets management

PKI

Encryption lifecycle management

Job description

State Street is seeking a Senior Data Security Architect to design, review, and govern security architectures for data across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, cybersecurity, and business teams to ensure data protection controls are embedded throughout the data lifecycle.

Responsibilities include defining cryptographic key management, encryption, tokenization, data masking, privacy controls, and secure