VP Information Security Officer

The Security Executive Council; Clifton (NJ); On-site; USD 120,000 - 187,500; Full time

Benefits offered by this job

401K with company match

Comprehensive medical insurance

Paid-time off including vacation and sick leave

Job summary

A financial services organization in New Jersey is seeking a VP, Information Security Officer to lead cyber risk management. This strategic role focuses on protecting digital assets and enhancing security measures while collaborating across teams. The ideal candidate will have significant cybersecurity experience and strong analytical skills. Compensation ranges from $120,000 to $187,500 annually, alongside comprehensive benefits.

Qualifications

• At least 7 years of progressive cybersecurity experience with 3+ years within financial services.
• Strong technical expertise in at least two focus areas such as Multi-Cloud, AI, Software Supply Chain.
• Professional certifications like CISSP, CEH, or OSCP are preferred.

Responsibilities

• Conduct cyber risk assessments to identify vulnerabilities and threats.
• Design remediation solutions that align with regulatory standards.
• Guide senior management on security matters and risk mitigation.

Skills

Cybersecurity experience

Problem-solving skills

Communication skills

Analytical skills

Education

Bachelor's Degree in Information Technology

Job description

About the job

Who We Are Looking For

The VP, Information Security Officer, provides cyber risk management advisory services across all lines of business within State Street. This role is responsible for working closely with the development teams and aligned cybersecurity peers in protecting digital assets, securing cloud resources, and assessing cyber risk across the organization, by identifying vulnerabilities and issues, providing technical guidance on secure development platforms, evaluating 3rd party cyber controls, designing threat models, and establishing strategic cyber risk prioritization. The Information Security Officer will be a strategic change agent that, in addition to providing cyber advisory services, will also be a thought leader to protect the bank assisting global cybersecurity teams in establishing Artificial Intelligence use cases to improve accuracy, increase scalability, and reduce human error.

What You Will Be Responsible For

• Cyber risk assessment at the application/platform/system levels to identify vulnerabilities and potential threats.
• Through collaboration, design appropriate end to end cyber remediation solutions that align to regulatory or industry standards to remediate risk.
• Design security capabilities within the development teams allow them to build scale across all scrum teams.
• Strong technical collaboration and cyber influence with application and platform owners.
• Provide expert guidance and recommendations to senior management on security matters, including risk mitigation solutions, new attack vectors and prevention, and metrics to identify areas of improvement in processes.
• Optimize ways to increase security and speed of deployment, while reducing friction within the development cycle.
• Collective design and optimize strong DevSecOps models.
• Evaluate third party software and services that strengthen cyber capabilities.
• Establish a targeted awareness campaign for developers that fosters a “security‑first” culture, promotes collaboration, and encourages proactive ownership.
• Work directly with technology developers in an agile security lifecycle environment from requirements through deployment and response.

Qualifications

What We Value

• At least 7 years of progressive cybersecurity experience with 3+ years within financial services.
• 3+ years of operationally focused cybersecurity practitioner working with secure cloud technologies.
• 2+ years’ experience working with business leadership across enterprise projects.
• Strong analytical and problem‑solving skills, excellent communication (written and verbal) and advisory skills, attention to detail, ability to work independently and in teams, adaptability, and ethical judgment.
• Strong technical expertise in at least two focus areas specifically in Multi‑Cloud, AI, Software Supply Chain, and Quantum Computing.
• Fundamental understanding of data structures, algorithms, and secure coding practices.
• Strong working knowledge of secure architectural design principles such as defense in depth, simplification, and secure by design.
• Strong technical knowledge in network security, product security, and data protection.
• Strong understanding of encryption, tokenization, and hashing.
• Good working knowledge of agile methodology, procedures, and iterative decision making.
• Demonstrate strategic and tactical thinking, along with decision‑making skills and business acumen.

Education & Preferred Qualifications

• Bachelor's Degree in Information Technology or related technical discipline
• Beneficial to have secure programming experience but not a necessity.
• At least one - Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified AI Security Fundamentals (CAISF), or Offensive Security Certified Professional (OSCP).
• AWS or Azure Cloud Security is preferable but not required.

Compensation

Salary Range

$120,000 - $187,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long‑term disability, and other optional additional coverages; paid‑time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance‑based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax‑advantaged savings plans. For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

We know how to fine‑tune corporate security because we've led effective and efficient Fortune 500‑level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.