Business Information Security Officer AVP

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Boston, MAQuincy, MA
Salary
$90,000–$157,500 / yr
Posted
23 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $169k
This role $124k
$75k most similar roles pay here $226k

This role pays less than 87% of similar roles. Most pay $138,099–$199,450 — the shaded band above. At the midpoint, this role pays about $124k versus about $169k for comparable roles.

Based on 239 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Business Information Security Officer AVP

Role Posting Log in to save

Business Information Security Officer- AVP serves as a trusted advisor within the first line of defense, providing cyber risk management oversight for specific business units and legal entities. This role involves integrating into a small team to provide cyber advisory services, execute a cyber book of work, and deliver metrics that support enhanced decision-making. You will perform cyber risk assessments at the application, platform, and system levels while collaborating with stakeholders to identify information assets and protection requirements. The position requires expertise in cloud and modern platform security, networking, security architecture, and identity and access management. Additionally, you will manage risks related to cryptography, vulnerability management, and emerging technologies like generative AI. You must translate technical risk into actionable business terms for senior leadership while ensuring compliance with frameworks such as NIST CSF 2.0 and ISO 27001.

Skills

AWS Azure Network Security Cryptography Identity and Access Management (IAM) Vulnerability Management Incident Response DevSecOps Secure SDLC SIEM NIST CSF 2.0 NIST SP 800-53 ISO 27001 Machine Learning Generative AI

What you'll do

  • Perform cyber risk assessments at the application, platform, and system levels to identify vulnerabilities and threats.
  • Translate complex technical risks into clear, actionable business terms for senior leadership and non-technical stakeholders.
  • Manage and oversee business unit risks in alignment with the firm's risk appetite and reporting requirements.
  • Identify information assets and determine protection requirements for specific lines of business and legal entities.
  • Prepare and deliver executive-ready presentations on threat models, control results, and security outcomes.
  • Represent the global cybersecurity organization in business control committees and specialized risk forums.
  • Report significant changes in information security risks to management on both a periodic and event-driven basis.

What we're looking for

  • Bachelor’s degree in computer science, a related technical field, or equivalent work-aligned experience.
  • Eight or more years of progressive cybersecurity and risk leadership experience (preferred).
  • Technical cybersecurity background in areas such as SOC, operations, networking, or engineering (preferred).
  • Practitioner-level depth in at least two core domains including cloud security, networking, architecture, or operating systems.
  • Ability to translate technical risks into actionable business terms for both technical and non-technical audiences.
  • Proficiency in risk management frameworks such as NIST CSF 2.0, NIST SP 800-53, or ISO 27001.
  • Knowledge of emerging technologies including Generative AI, Agentic AI, and machine learning risks.
  • CISSP or CISM certifications (preferred); CRISC, CISA, SSCP, CCSP, CEH, or GIAC certifications highly valued.

Related searches

More Business Information Security Officer jobs Business Information Security Officer jobs in Boston All jobs at State Street

More like this

Similar roles

Business Information Security Officer VP

State Street

Quincy, MA +3 23 days ago $120,000–$202,500
Blockchain Digital Assets HSM MPC Smart Contracts AWS Azure Cloud Security Cryptography Key Management IAM PAM SOC SIEM DevSecOps SDLC NIST Cybersecurity Framework Vulnerability Management Incident Response Machine Learning
6+ yrs exp
Save

Business Information Security Officer AVP

State Street

Quincy, MA 9 days ago $90,000–$157,500
Cyber Risk Management Network Security SaaS Zero Trust Secure SDLC Vulnerability Management Patch Management Configuration Management Data Protection Threat Intelligence NIST ISO SOC FFIEC Risk Assessment Security Architecture
Save

Principal Business Information Security Officer

LPL Financial

Fort Mill, NC +2 100 days ago $147,393–$245,655
Cyber Security Cloud Computing DevSecOps API Security Agile Waterfall Risk Management Web Application Development CISSP CRISC
10+ yrs exp
Save

AVP Engineering Security Operations Manager

LPL Financial

Austin, TX +4 45 days ago $129,986–$216,609
SIEM EDR DLP Vulnerability Management Identity and Access Management Network Security Cloud Security Splunk Exabeam Sentinel CrowdStrike SentinelOne Microsoft Defender for Endpoint Qualys Tenable Rapid7 Python PowerShell AWS Azure GCP
10+ yrs exp Hybrid
Save

Information System Security Officer

Leidos

Springfield, VA 22 days ago $107,900–$195,050
Risk Management Framework RMF FISMA ICD-503 Security+ ATO Information Assurance Data Correlation Security Engineering Intelligence Community
8+ yrs exp
Save