VP, AI Security & Data Protection Governance

State Street; Quincy (MA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits package

Paid time off

Job summary

State Street is seeking a Vice President to lead AI security and data protection governance, reporting to the Managing Director, Data Protection. You will establish enterprise governance, translate strategy into policies, standards, and controls, and drive risk-based decision making across security, risk, compliance, legal, and procurement teams.

You will partner with Security Architecture, Engineering, and business units to embed secure-by-design principles, define due-diligence for third-party

Qualifications

• Bachelor’s degree in information security or related field.
• 10+ years in cybersecurity, AI security, data protection, or risk/controls governance.
• Certifications such as CISSP, CISM, CRISC, CCSP or equivalent preferred.

Responsibilities

• Establish and maintain enterprise governance for AI security and data protection across platforms.
• Govern discovery, inventory, classification, and risk assessment of AI models and data assets.
• Define risk-based criteria and develop minimum control requirements and remediation expectations.
• Lead the governance team and partner with security, risk, compliance, and business units.

Skills

AI security

Data protection

Governance

Risk management

Executive communication

Education

Bachelor’s degree

Advanced degree preferred

Tools

PKI

Key management

Cloud security

GRC platforms

Dashboard tooling

Job description

State Street is seeking a Vice President to lead AI security and data protection governance, reporting to the Managing Director, Data Protection. You will establish enterprise governance, translate strategy into policies, standards, and controls, and drive risk-based decision making across security, risk, compliance, legal, and procurement teams.

You will partner with Security Architecture, Engineering, and business units to embed secure-by-design principles, define due-diligence for third-party