Chief Information Security Officer – Managing Director

State Street
London
9 months ago
Applications closed

Related Jobs

View all jobs

Identity and Access Management Analyst

Head of Technology

Information Security Manager - ISO27001

Interim Chief Operating Officer

Specialist Officer

Interim Head of Service – Street Scene & Leisure

State Street seeks to recruit a Chief Information Security Officer – Managing Director to improve the overall protection of State Street’s EMEA customers and partners from the evolving landscape of threat actors.

The UK / Ireland CISO candidate must have experience driving security through leadership down through the organization on a large scale. This candidate should be a proven global cyber security leader who has experience in delivering on strategic outcomes with business operational quality and a focus on business needs. The candidate should have experience scaling security solutions to ensure sustainability and endurance throughout constant change. This leader will be part of a team responsible for ensuring the security of the business and functional teams in line with company and security policy, standards, and guidelines. The position will report to the SVP, Global Cyber GRC & GTS Tech Risk Mgmt Head.

This role will be based in the London office for State Street.

What you will be responsible for

This leader will function at the Executive Leadership level for the UK / Ireland region. Contribution to the development and progression of the Business’ exercise of connecting security into their strategic and tactical plans will be a critical success criteria. The function will champion the Information Security mandate from the Global CISO acting as a critical partner guiding stakeholders to embed information risk management practices. The candidate must be able to present to multiple audiences including external customers and clients. Critical measurements through developed KPIs reporting to the GRC team will also define business adoption to the Security framework governing State Street.

Key Responsibilities:

  • Serve as key Security contact for the UK / Ireland region leadership team.
  • Collaborate with Global Cyber Security and assigned business partner teams to ensure the business aligns plans addressing security policies in their products and services.
  • Work across the BISO Organization to appropriate shared success solutions.
  • An ability to motivate and manage a team of information security staff supporting the organization’s goals and an ability to lead the process of developing an information security vision for the future.
  • An ability to cultivate and build collaborative working relationships with a broad range of enterprise stakeholders.
  • Ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
  • Drive change through the ability to effectively influence others to modify their opinions, plans, or behaviors.
  • Perform Ad-Hoc security awareness to ensure region is fully aware of current threats facing the company.
  • Provide security leadership presence at a number of risk committees on a cadence basis.
  • Manage application risk and remediation prioritization based on a portfolio of regional assets.
  • Review and present Phishing statistics with educational sessions on improvement tactics.
  • Communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.
  • Consistently display working knowledge of the following areas of technical expertise: information policy formulation, information security management, business risk management, IT risk assessment and management.
  • Communication laterally and upwards the business temperament to security requirements.
  • Create visibility through effective security and risk metrics and reporting.
  • Build budget in conjunction with needs to ensure success of the implementation of security within the regional area.
  • Execute the implementation of Global Cyber Security strategies and tactics aligned to key State Street risk and business needs.
  • Participate actively in key Risk decision committees and forums for consistent visibility into the state of security within the region.
  • Create and deliver effective presentations as a means for communicating project and deliverable progress.
  • Provide regular status updates to the SVP, GRC on business dealings affecting Security.
  • Build and nurture positive working relationships with clients with the intention to exceed client expectations.
  • Work cross-functionally with team members to support and drive a collaborative team environment down through the BISO community.
  • Mentor and train team members on security processes, governance, and frameworks applicable to UK / Ireland region.
  • Provide business understanding of technical problems for highly executable remediation activities.

Desired Outcomes

  • KPI development demonstrating success within the Region’s security program.
  • Adherence to all regulatory compliance mandates throughout the Business Unit.
  • Security transformation of Business Unit staff improving overall security.
  • Promotion of a collaborative team atmosphere for mutual success in business alignment to GCS requirements.

Key relationships:

  • Information Security Officers
  • UK / Ireland Business and Functional Leaders
  • SVP, Cyber Fusion Center
  • SVP, Cyber Architecture & Security Engineering
  • SVP, Cyber Governance & GTS Tech Risk Mgmt Head
  • EVP, Head of International, Risk, Governance
  • Collaboration with 3LOD – Compliance, Risk Management, Corporate Audit

Education & Preferred Qualifications

  • 15+ years of experience in information security, a security related field or other information risk management function.
  • Strong experience within the Financial Services industry.
  • Modern technical understanding and experience developing and implementation large-scale innovation.
  • Extensive experience in strategic planning, budgeting, and allocation.
  • Depth with modern technology stacks – data science, machine learning, cloud (hybrid).
  • Project Management experience leading large and small technical teams.
  • Experience operating in regulated environment.
  • Bachelor’s degree in a technical field.

Critical Leadership Capabilities

  • Driving results
  • Strategic Thinking
  • Collaborating & Influencing
  • Change Management
  • Senior Executive communication
  • Personnel Management
  • Project Management

About State Street

What we do.State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow.We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility.We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Discover more at StateStreet.com/careers

State Street's Speak Up Line

#J-18808-Ljbffr

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Write a Cyber Security Job Ad That Attracts the Right People

Cyber security is now a board-level priority for organisations across the UK. From financial services and healthcare to critical infrastructure, SaaS platforms and the public sector, demand for skilled cyber security professionals continues to grow. Yet despite this demand, many employers struggle to attract the right candidates. Cyber security job adverts often generate large volumes of applications, but few are a genuine match. Meanwhile, experienced security engineers, analysts and architects quietly ignore adverts that feel vague, unrealistic or disconnected from real security work. In most cases, the problem is not a lack of talent — it is the quality of the job advert. Cyber security professionals are trained to assess risk, spot weaknesses and question assumptions. A poorly written job ad signals organisational immaturity and weak security culture. A well-written one signals seriousness, competence and trust. This guide explains how to write a cyber security job ad that attracts the right people, improves applicant quality and positions your organisation as a credible security employer.

Maths for Cyber Security Jobs: The Only Topics You Actually Need (& How to Learn Them)

If you are applying for cyber security jobs in the UK it can feel like “real security people” must be brilliant at maths. The reality is simpler: most roles do not need degree-level pure maths. What they do need is confidence with a small set of practical topics that show up repeatedly in day-to-day work across SOC, incident response, cloud security, AppSec, threat detection, IAM & security engineering. This guide strips the maths down to what actually helps you get hired. It includes a 6-week learning plan plus portfolio projects you can publish to prove the skills. You will focus on: Number systems & bitwise thinking (binary, hex, bytes, XOR) Modular arithmetic basics (enough to understand how modern crypto “works”) Probability & statistics for detection, triage & risk Discrete maths for logic, sets, graphs & complexity Security maths habits: estimation, false positive control & evidence-led reporting You will not waste time on heavy theory that rarely appears in junior or mid-level cyber security roles.

Neurodiversity in Cyber Security Careers: Turning Different Thinking into a Superpower

Cyber security is all about thinking like an attacker, spotting unusual patterns, protecting systems & responding calmly when everything looks like it’s on fire. It’s a discipline built on curiosity, persistence & noticing things other people miss. That’s exactly why it can be such a good fit for many neurodivergent people. If you live with ADHD, autism or dyslexia, you may have been told your brain is “too distracted”, “too literal” or “too disorganised” for a security role. In reality, the traits that can make traditional office work tough often line up beautifully with cyber security work – from hyperfocus in incident response to meticulous analysis in threat hunting. This guide is written for cyber security job seekers in the UK. We’ll look at: What neurodiversity means in a cyber context How ADHD, autism & dyslexia strengths map to different security roles Practical workplace adjustments you can ask for under UK law How to talk about neurodivergence during applications & interviews By the end, you’ll have a clearer sense of where you might thrive in cyber security – & how to turn “different thinking” into a genuine superpower.