This listing doesn't post a salary. Most similar roles pay
$139,000–$203,625.
Based on 240 similar postings.
Employer
About State Street
State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody
State Street currently has
301 open roles
on FindRole.
Listed pay typically runs
$120,000–$202,500
across 213 roles with salary data.
Business Information Security Officer-VP
The Business Information Security Officer-VP serves within the first line of defense, providing cyber risk management oversight for specific business units and legal entities. This role involves leading a small team to provide cyber advisory services, building application and service-level threat models, and delivering metrics to support executive decision-making. The successful candidate will perform cyber risk assessments at the platform and system levels while integrating security reviews into lifecycle processes like incident management and vulnerability management. Key technical competencies include cloud and multi-cloud security, networking, identity and access management, and cryptography. Additionally, the role requires expertise in emerging technologies such as generative AI, machine learning, and blockchain. The position functions as a trusted advisor to senior leadership, translating complex technical risks into actionable business terms to improve cyber resilience and manage residual risk within a large financial firm.
Perform cyber risk assessments at the application, platform, and system levels to identify vulnerabilities and determine necessary protections.
Develop and maintain application- and service-level threat models for various business units and legal entities.
Translate complex technical risks into clear, actionable business terms for senior leadership and non-technical stakeholders.
Manage cyber risk levels in alignment with the firm's appetite through continuous engagement and escalation of open issues.
Integrate security risk reviews into lifecycle processes including incident management, vulnerability management, and third-party risk assessments.
Deliver executive-ready presentations on threat models, control results, and protection needs to senior leadership.
Represent the global cybersecurity organization as a member of business control committees and specialized forums.
Advise business leaders on policy compliance and promote cyber awareness across the organization.
What we're looking for
Bachelor’s degree in Computer Science, a related technical field, or equivalent work-aligned experience.
CISSP or CISM certification is required.
5+ years of experience working with business leadership across enterprise projects.
Practitioner-level depth in at least two focus areas including Multi-Cloud, AI, Machine Learning, Blockchain, Software Supply Chain, or Quantum Computing.
Ability to translate technical risk into actionable business terms for both technical and non-technical audiences.
Familiarity with recognized standards and frameworks such as NIST CSF 2.0, NIST SP 800-53, or ISO 27001.
CRISC, CISA, SSCP, CCSP, CEH, or GIAC certifications are highly valued (preferred).
Emerging-tech or AI security certification is a strong plus (preferred).