Information Security Officer - Global Technology Services, Vice President - State Street

An Information Security Officer (ISO) who will be an integral part of a team responsible for ensuring the security of the business and functional teams in line with the company security policy and risk tolerance.

Other key relationships:

• Information Security Officers

• Business and Functional Technical Leaders

• Cyber Transformation Office

• Collaboration with 3LOD – Business, Compliance, Risk Management, Corporate Audit

• Regional CISOs

This role requires a minimum of 4 days in a company office.

What you will be responsible for

• Consistently and effectively engage with Technology and Business leadership to embed security into their strategic and tactical plans.  

• Champion the Information Security mandates acting as a liaison between Global Cybersecurity (GSC) and Global Technology Services (GTS).

• Actively promote and deliver on the ISO program and its mission.

• Ability to operate autonomously with minimal directions or instructions to fully partner and to support responsible BU.

• Being a Trusted Cybersecurity Risk Adviser to the BU leadership team in all technical & cyber risk matters.

• Positioning security within the business with the ability to communicate in non-technical terminology.

• Create ambassadorship programs down in the business to ensure security is a partnership.

• Assist in the development and successful outcomes of Security KPI/KRI that drive control effectiveness.

• Report security performance and create visibility through effective metrics and reporting.

• Directly support technical security assessments & recommend remediation plan for the partnering BU’s.

• Participate in Information Security and 3rd Party Risk Management (TPRM) assessment for assigned BU.

• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner to all levels of target audience from executives to technical staff.

• Delivery of effective security outcomes that drives improvements of security within the business.

• Participate actively in decision making with management and seek to understand the broader impact of current decisions.

• Create and deliver effective presentations as a means for communicating project and deliverable progress at all levels of target audience.

• Build and nurture positive working relationships with BUs with the intention to exceed expectations.

• Work cross-functionally with team members to support and enhance collaborative environment.

• Manage the trade-offs required to manage the various levels of risk tolerance and risk exposure across the organization and balance this with risk investments.

• Partner with BU Leadership to identify, evaluate, and address cyber security risks.

• Ensures and monitors security compliance with industry and government rules and regulations.

• Coordinates with technology and business groups to assess, implement, and monitor IT-related security risks.

• Promote information security awareness program to ensure staff members across the organization understand the trade-off between risk and return.

• Understands “voice of the customer” and develops mechanisms to proactively sense adoption and usage patterns by end users so that policy can align with need.

• Stay up to date on present and emerging security trends, technology, & threats. 

• Guide and mentor junior but technical staff in all information technology and cyber risk matters.

These skills will help you succeed in this role:

• Driving results

• Analytical & Strategic Thinking

• Collaborating & Influencing

• Senior Executive communication

• Ability to give presentations at all levels and diverse audiences.

• Experience managing small but technical staff

• S.M.A.R.T. goals that symbolize success of Security adoption within the BUs.

• Project Management experience leading small and medium sized teams to successful completion.

• Modern technology understanding, experience developing and implementing innovated techniques and solutions to delivering cost efficient and secure solutions.

• Self-starter with attention to detail that believes in continuous learning and continuous improvement in all areas.

• Hands-on experience or working knowledge in multiple technical & security domains: IAM, firewall, network, secure solution design, VPN, encryption, vulnerability & code review, Windows/Unix/Linux server security, SSO, MFA, industry security framework & standards, various protocols (e.g., TCP/IP, UDP, MPLS, SSL/TLS, SSH, HTTPS, FTP, RDP, ICA, BGP, LDAP, etc.)

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one

• An ability to effectively influence others to modify their opinions, plans, or behaviors

• Ability to react to high pressure dynamic changing environments

Education & Preferred Qualifications

• 10+ years of experience in information security (cybersecurity) and related technology experience required.

• Bachelor’s degree in a technical field (e.g., Computer Science, Engineering, IT, etc.)

• CISSP, CRISC, CISM, or similar certifications a plus.

• Highly regulated environment experience, preferably financial services.

Additional requirements

Travel up to 10% may be required.

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don’t necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.

Why this role is important to us

Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.

We offer a collaborative environment where technology skills and innovation are valued in a global organization. We’re looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.

Join us if you want to grow your technical skills, solve real problems and make your mark on our industry.