VP, AI Security & Data Protection Governance

State Street; Berwyn (PA); Hybrid; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Vice President of AI Security and Data Protection Governance and Controls to establish and oversee the enterprise governance framework for secure AI and data protection capabilities. You will translate strategy into policies, standards, and measurable remediation programs across enterprise platforms and third-party services.

You will partner across Security, Technology, Risk, Compliance, Legal, Procurement, and the business to embed security-by-design, resilient

Qualifications

• 10+ years in cybersecurity, AI security, data protection, or governance.
• Experience shaping enterprise security policies, standards, and controls.
• Ability to engage executives and regulatory audiences in a large organization.

Responsibilities

• Establish enterprise governance framework for AI security and data protection.
• Govern discovery, inventory, classification, and risk assessment of assets.
• Define risk-based prioritization criteria including data sensitivity and exposure.
• Design minimum control requirements and testing procedures across platforms.
• Oversee modernization roadmap for secure technologies and control solutions.
• Partner with Architecture to embed security-by-design and adaptable controls.

Skills

AI security

Data protection

Security architecture

Governance

Risk management

Control principles

Executive communication

Education

Bachelor’s degree in Information Security / Computer Science / Engineering / Mathematics

Advanced degree preferred

Tools

PKI

Certificate & key management

Cloud security architectures

Governance, risk & compliance platforms

Dashboards reporting tools

Job description

State Street is seeking a Vice President of AI Security and Data Protection Governance and Controls to establish and oversee the enterprise governance framework for secure AI and data protection capabilities. You will translate strategy into policies, standards, and measurable remediation programs across enterprise platforms and third-party services.

You will partner across Security, Technology, Risk, Compliance, Legal, Procurement, and the business to embed security-by-design, resilient