VP, AI Security & Data Protection Governance

State Street; Stamford (CT); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Insurance coverage

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a Vice President for AI Security and Data Protection Governance and Controls. This role reports to the Managing Director, Data Protection, and will establish the enterprise governance framework for secure AI and data protection capabilities.

You will translate strategy into policies, standards, controls, risk decisions, and remediation programs across enterprise platforms, applications, and third-party services.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Mathematics, AI Security and Data Protection, or related field.
• Advanced degree preferred.
• 10+ years of progressive experience in cybersecurity, AI security, data protection, security architecture, technology risk, or control governance.
• Certifications preferred: CISSP, CISM, CRISC, CCSP, cloud security, or comparable industry certifications.
• Knowledge of PKI, cloud security architectures, asset, configuration, governance, risk, and compliance platforms; reporting or dashboard technologies.
• Experience communicating with executive, audit, regulatory, and non-technical audiences in large regulated organizations.

Responsibilities

• Establish and maintain the enterprise governance framework, policies, standards, decision rights, and accountability model for AI security, data protection, and emerging technology risk.
• Govern the discovery, inventory, classification, and risk assessment of AI models, data assets, security controls, platforms, applications, integrations, and technology dependencies.
• Define risk-based prioritization criteria using data sensitivity, retention period, business criticality, external exposure, and migration complexity.
• Design minimum control requirements, testing procedures, evidence standards, exception processes, compensating controls, and remediation expectations.
• Establish and oversee the enterprise roadmap for transitioning vulnerable security and data protection implementations to approved secure technologies and control solutions.
• Partner with Security Architecture and Engineering to embed AI security and data protection into solution design and engineering standards.
• Define AI security and data protection requirements and due-diligence criteria for third-party products and cloud services.
• Serve as the subject-matter authority for AI security and data protection governance in engagements with senior leadership, Risk, Compliance, Internal Audit, external auditors, clients, and regulators.
• Establish dashboards, key risk indicators, and performance measures for inventory coverage, AI and data risk exposure, control compliance, and remediation.
• Lead and develop a team responsible for governance, control oversight, risk assessment, and cross-functional execution.

Skills

AI security

Governance

Risk management

Stakeholder leadership

Policy development

Education

Bachelor's degree in Information Security

Advanced degree preferred

Tools

PKI

Certificate management

Cloud security

GRC platforms

Dashboard tools

Job description

State Street is seeking a Vice President for AI Security and Data Protection Governance and Controls. This role reports to the Managing Director, Data Protection, and will establish the enterprise governance framework for secure AI and data protection capabilities.

You will translate strategy into policies, standards, controls, risk decisions, and remediation programs across enterprise platforms, applications, and third-party services.