Business Information Security Officer – VP

State Street

. Provide cyber risk management oversight to lines of business and legal entities within State Street’s first line of defense .

Posted 10/23/2026full-timeUnited StatesLead💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity risk management, governance, and compliance within regulated financial services, with a strong focus on incident response, threat assessment, and business alignment. Proficient in translating complex technical risks into actionable business strategies while fostering relationships with senior leadership and stakeholders.

Highest-signal resume keywords

Cyber Risk ManagementGovernance, Risk, And ComplianceCybersecurity LeadershipIncident ResponseNIST CSF 2.0

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk AssessmentSecurity ArchitectureVulnerability ManagementData ProtectionCloud SecurityNetwork SecurityCryptographySecure SDLCDevSecOpsData Mining

Soft Skills

Analytical SkillsInterpersonal SkillsActive ListeningDependabilityTeamwork

Tools & Technologies

DashboardsData-Mining ToolsSecurity OperationsMonitoring ToolsIncident Guidance

Certifications & Qualifications

CISSPCISMCRISCCISASSCPCCSPCEHGIAC

Industry Keywords

Financial ServicesCyber ResiliencyRisk AppetiteResidual Risk ScoringThird-Party SecurityExecutive PresentationsRegulatory ComplianceEmerging ThreatsGenerative AI RisksISO 27001

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Provide cyber risk management oversight to lines of business and legal entities within State Street’s first line of defense
Deliver cyber advisory services and execute a cyber book of work aligned to State Street business units
Deliver metrics and cyber-driven content supporting enhanced business decision-making
Act as a trusted advisor and change agent to senior business leaders
Correlate the firm’s cyber risk taxonomy to business processes and determine residual cyber risks
Understand threats and risk mitigations and perform cyber risk assessments at application, platform, and system levels
Recommend solutions that protect the bank and strengthen cyber resiliency and incident-response preparedness
Partner with senior business and technology leaders through timely data delivery
Manage risks in line with risk appetite and escalate open risk items to business leadership
Identify information assets and assess protection needs for lines of business and legal entities
Represent Global Cybersecurity on business control committees, risk committees, and specialized forums
Prepare and deliver executive-ready presentations and briefings on protection needs, threat models, and control results
Report significant information security risk changes to management
Serve as an on-call contact for cybersecurity governance, risk-based decision-making, incident guidance, and escalation of material issues
Establish relationships with business risk executives, third-party management, client relations, technology services, lines of defense, and regulatory teams
Coach others and stay current on emerging threats, technologies, and trends

Requirements

What you’ll need

Bachelor’s degree in computer science or a related technical field, or equivalent work-aligned experience
Ten or more years of progressive cybersecurity and risk leadership experience
Experience including governance, risk, and compliance, preferably within regulated financial services
Technical cybersecurity background, such as SOC, operations, networking, or engineering
Practitioner-level depth in at least five security domain areas
Understanding of cloud and modern platform security, networking and network security, security architecture, and operating systems
Knowledge of cryptography, encryption, key management, patching, vulnerability management, cyber resiliency, incident response, recovery, data classification, data protection, secure communication protocols, IAM, secure SDLC, DevSecOps, third-party security, security operations, and monitoring
Ability to articulate Generative AI risks and distinguish Generative AI, Agentic AI, and traditional Machine Learning
Understanding of model risk, frontier models, and related risk management
Familiarity with NIST CSF 2.0, NIST SP 800-53, and ISO 27001
Understanding of issue management, triage, remediation tracking, and residual-risk scoring
Ability to influence executives and translate technical risk into business language
Experience with dashboards and data-mining tools
Strong analytical and interpersonal skills, including active listening, dependability, and teamwork
CISSP or CISM strongly preferred; CRISC, CISA, SSCP, CCSP, CEH, or GIAC certifications highly valued
Ability to work 9–5 EST hours
Availability for off-hours on-call work as needed

Benefits

Comp & perks

Retirement savings plan (401K) with company match
Basic life, medical, dental, vision, and long-term disability insurance
Optional additional insurance coverages
Paid vacation and sick leave
Short-term disability
Family care responsibilities leave
Employee Assistance Program
Incentive compensation, including eligibility for annual performance-based awards
Certain tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks