VP, BISO - Cyber Risk Strategy & Executive Advisory

State Street; Clifton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Vice President, Business Information Security Officer (BISO) to provide cyber risk management across business lines and legal entities. This leader will integrate into a tight, advisory-focused team, drive a cyber book of work, and deliver metrics to support informed decision-making in a large financial services environment.

The role requires strong technical depth in at least five security domains, partnership with senior leaders, and a proven ability to influence

Qualifications

• Bachelor’s degree in computer science, or a related technical field — or equivalent work-aligned experience.
• CISSP or CISM strongly preferred. CRISC, CISA, SSCP, CCSP, CEH, or GIAC certifications highly valued.
• Ten or more years of progressive cybersecurity and risk leadership, including governance, risk, and compliance preferably within regulated financial services.

Responsibilities

• Partner with senior business and technology leaders through timely data delivery to enable informed decision-making, prioritization, and risk-based trade-offs.
• Oversee and actively manage risks in line with risk appetite through continuous business unit engagement, escalating open risk items to aligned business leadership.
• Collaborate with key stakeholders to identify information assets and assess the protection needs requirements for the entire line of business and legal entity.
• Perform cyber risk assessments at the application / platform / system levels to identify vulnerabilities and potential threats, analyze impacts to the bank, and determine protections required via GCS standards.
• Represent the global cybersecurity organization as a member of business control committees, risk committees, and specialized forums.
• Prepare and deliver executive-ready presentations and briefings on protection-needs outcomes, threat models, and control results to mid- and senior-level leadership.
• Report significant changes in information security risk to the appropriate level of management on both a periodic and an event-driven basis.
• Serve as an on-call point of contact for cybersecurity governance matters as needed, facilitating risk-based decision making, incident guidance, and timely escalation of material issues.

Skills

Cloud security

Networking security

Security architecture

Operating systems

Data protection

IAM / Privileged Access

DevSecOps

Education

Bachelor's degree in computer science or related field

Job description

State Street is seeking a Vice President, Business Information Security Officer (BISO) to provide cyber risk management across business lines and legal entities. This leader will integrate into a tight, advisory-focused team, drive a cyber book of work, and deliver metrics to support informed decision-making in a large financial services environment.

The role requires strong technical depth in at least five security domains, partnership with senior leaders, and a proven ability to influence