Information Security Architect

Who we are looking for

We are seeking a highly skilled Information Security Architect with a deep expertise in data protection to join our dedicated information security team.

The ideal candidate will have extensive experience in building robust security architectures focused on protecting data both technically and operationally within a highly regulated environment.

Why this role is important to us

This role emphasizes the implementation of advanced security frameworks, including cryptography, data protection strategies for data at rest, in motion, and in use, and the deployment of technologies such as Data Security Posture Management (DSPM), Cloud Access Security Brokers (CASB), and Security Service Posture Management (SSPM). The candidate will play a key role in navigating the complexities of audits and compliance initiatives to safeguard our sensitive information.

What you will be responsible for

1. Architectural Design and Implementation:

• Define, design, and maintain the security architecture for data protection, incorporating industry best practices and regulatory requirements.
• Develop and implement security models and frameworks that support data security across all phases of its lifecycle, including data at rest, in motion, and in use.

2. Data Protection Strategies:

• Design and deploy cryptographic solutions and protocols tailored to protect sensitive data and ensure compliance with industry regulations.
• Develop and enforce policies for the secure handling, transfer, and storage of data, leveraging solutions like DSPM, CASB, and SSPM.

3. Regulatory Compliance and Risk Management:

• Ensure that all security architectures align with relevant compliance requirements (e.g., GDPR, HIPAA, PCI-DSS) and industry standards.
• Conduct regular risk assessments and audits of data protection measures, validating their effectiveness and compliance with regulatory demands.

4. Incident Response and Monitoring:

• Collaborate with incident response teams to design procedures and develop response plans for potential data security incidents.
• Implement continuous monitoring mechanisms for data usage, detecting anomalies in data access patterns for proactive risk management.

5. Collaboration and Stakeholder Management:

• Work closely with IT teams, legal advisors, and compliance officers to integrate security measures smoothly into systems and operations.
• Engage with stakeholders at all levels to communicate security architecture needs and promote a strong security culture.

6. Thought Leadership and Innovation:

• Stay current with emerging trends, threats, and technologies in data protection and information security.
• Provide guidance on cutting-edge security technologies and strategies, ensuring that our data protection initiatives leverage the latest advancements in the industry.

What we value

These skills will help you succeed in this role

• Exceptional analytical skills and a strong attention to detail.
• Excellent communication and collaboration skills to work with both technical and non-technical stakeholders.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Education & Preferred Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related fields. A master's degree is preferred.

• Minimum of [7-10] years of experience in information security, with a strong focus on security architecture and data protection.
• Proven experience within a highly regulated industry (financial services, healthcare, government, etc.) and an understanding of its compliance landscape.
• Certifications:
• Relevant certifications such as CISSP, CISM, CISA, CCSP, or similar recognized credentials in cybersecurity and data protection.
• Technical Skills:
• In-depth knowledge of cryptographic methods and data protection architectures.
• Familiarity with advanced data security frameworks including DSPM, CASB, and SSPM.
• Strong understanding of network security protocols and practices, cloud security, and information assurance.

Salary Range:

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.