The role owns three integrated disciplines: Security Architecture (design-time review and threat modelling), Security Assurance (validation that security commitments are implemented), and Security Testing (internal and external penetration testing).  

The successful candidate will combine deep security architecture expertise with strong leadership and  will focus on scaling the function through repeatable patterns, automation, and modern tooling.  

Responsibilities: 

Leadership and Strategy  

• Define and lead the strategy, operating model, and roadmap for Security Architecture and Assurance across CRD.  

• Build, lead, and develop a multi-disciplinary team spanning architecture, assurance, and Security testing across multiple geographies.  

• Represent the security function to senior leadership and key stakeholders.   

• Foster a culture of secure design and continuous improvement.   

Security Architecture and Assurance  

• Own security architecture review and threat modelling across CRD products, and major architectural changes.  

• Provide security leadership into Architecture Review Board (ARB) and governance forums within CRD  

• Establish and own architecture conformance validation, ensuring design commitments are implemented before release.  

Security Testing  

• Own the internal and external penetration testing programs, including methodology, coverage strategy, and remediation oversight.  

• Develop AI-augmented testing capability as the function matures.  

Education Requirements: 

• Bachelor’s degree in computer science, engineering, or a related technical field  

• Certifications such as CISSP, SABSA, TOGAF, OSCP, or equivalent strongly preferred.  

• Knowledge of AI threats and AI security architecture is an advantage  

Key skills and prior experience: 

• 12+ years of progressively responsible experience in security architecture, application security, including significant experience in secure SDLC and threat modelling.  

• Experience leading or building a security architecture function.  

• Experience leading and mentoring senior technical staff, with readiness to formally lead a multi-disciplinary, multi-location team.  

• Deep expertise in security architecture for web applications, APIs, cloud, and distributed / microservices systems.  

• Strong knowledge of authentication and authorization models, identity management, cryptography, and secure logging and monitoring.   

• Experience building or running penetration testing programs is strongly preferred.  

• Excellent communication skills, with the ability to convey risk to both technical and executive audiences.   

• Awareness of AI-assisted security tooling and its application to assurance at scale.  

• Demonstrated ability to design and develop software solutions to business and technical problems of high complexity 

• Outstanding written and verbal communication skills 

• Able to work well with peers in a collaborative team environment 

• Employees are expected to work from the office 4 days a week. 

Travel: 

May be required on a limited basis. 

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world.  From technology to product innovation we're making our mark on the financial services industry.  For more than two centuries, we've been helping our clients safeguard and steward the investments of millions of people.  We provide investment servicing, data & analytics, investments research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment.  Our benefits packages are competitive and comprehensive.  Details vary in locations, but you may expect generous medical care, insurance and savings plans among other perks.  You'll have access to flexible Work Program to help match your needs.  And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity, and Social Responsibility. We truly believe our employees' diverse backgrounds, experience and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients.  We warmly welcome the candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality.  Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader.  You will have tools to help balance your professional and personal life, paid volunteer days, matching gift program and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Company: Charles River Development

Discover more at www.StateStreet.com/careers