State Street seeks to recruit a Cyber Fusion leader to enable the transformation from a legacy Security Operations Model, to a pro-active intelligence drive fusion model that better protects State Street, its customers and partners from the ever evolving and sophisticated global threat actors.
This candidate should be a proven global security and operations leader who has experience in delivering outcomes with operational excellence and a focus on the customer and business needs. The candidate should have experience in large scale cyber transformations, as well as company digital transformations. Talent acquisition and development are a critical component to ensure the success of this organization, and therefore this leader should be a teacher and mentor with experience in identifying, creating and retaining high potential and high performance teams.
This leader will have a broad range of responsibilities within the cyber team and will be responsible for the strategy and implementation of the new cyber fusion function. Specifically this leader will have responsibility for Cyber Fusion and the key underlying capabilities to include but not limited to:
Cyber incident response and management
Threat Monitoring & Detection
Cyber intelligence
Advanced Threat detection & investigation
Cyber data analytics, including use of ML/AI
Alignment with the rest of the GTS and business functions
Reports to: Global CISO
Other key relationships:
SVP – Cyber Architecture and Engineering
SVP – Cyber GRC
GTS CTO & CTO organization
Collaboration with 3LOD – Compliance, Risk Management, Corporate Audit
Key Responsibilities
Drive the cyber fusion strategy for State Street to create an industry leading capability to coordinate intelligence gathering across a variety of sources, internal and external, in order to rapidly identify threats to State Street, its clients and the broader financial ecosystem
Translate the fusion strategy into an executable, timebound roadmap for delivery and clear fusion organization design and interaction points with other functions
Collaborate with Cyber Architecture and Engineering to ensure the appropriate architecture and engineering solutions to support the fusion model
Build out and retain critical cyber talent, along with the necessary supporting pipeline
Ensure existing obligations to the business and regulators are met within the specified timelines
Ensure the effective management and delivery by cyber fusion related providers and outsourced services
Create visibility through effective metrics and reporting
Oversee information security incident response and incident response planning, as well as the investigation of security breaches and other related disciplinary and legal matters
Lead the orchestration and coordination of several different, but related, teams to increase operational effectiveness, readiness and response to cyber threats.
Actively monitor and research cyber threats with direct or indirect impact to State Street brand, region, business operations, technology infrastructure and client trust
Participate in the State Street crisis drills representing Cyber Fusion Center functions and engagement teams
Liase with external partners to build greater situational awareness for the cyber security fusion center and its partners
Maintain relationships with local and federal law enforcement and other government agencies in the key jurisdictions in the which the bank operates
Conduct, manage and coordinate complex and sensitive investigations regarding security threats and violations, including insider threat.
Desired Outcomes
Delivery of a cyber fusion center and model, that enables State Street to have a world-class capability to effectively address the increasingly complex and rapidly evolving security needs of the Bank
Delivery of integrated capabilities across various sub-disciplines within the fusion organization, Cyber, and Global Technology Services
Build a team across the appropriate security domains with a deep bench of talent, succession plans, and a cohesive culture of operational excellence, accountability and a passion for learning.
Ideal Experience
15+ years of managerial experience in information security, a security related field or other complex information risk management function
Modern technical understanding and experience developing and implementation large-scale innovation. Depth with modern technology stacks – data science, machine learning, cloud (hybrid)
Has lead teams in excess of 300 – FTE and contractors/outsourcers