MD, Sr. Information Security Officer

<p>State Street seeks to recruit a Sr. Information Security Officer to improve the overall protection of State Street customers and partners from an evolving and sophisticated threat landscape.</p><p>This candidate should be a proven global cyber security and risk leader who has experience in delivering on strategic outcomes with business operational quality and a focus on business needs. The candidate should have experience in large scale cyber transformations and execution.</p><p>This leader will be part of a team responsible for ensuring the security of the business and functional teams in line with company and security policy, standards, and guidelines.   </p><p>This role will be based in the Germany.</p><p>What you will be responsible for</p><p>This Risk and Controls leader will contribute to the maturation of the Business’ practice of embedding security into their strategic and tactical plans.  The ISO function will champion the Information Security mandate acting as a critical partner guiding stakeholders to embed information risk management practices.   This will include compliance adherence, regulatory support, KPI development, risk reduction efforts. </p><p>Key Responsibilities:</p><ul><li>Collaborate with Global Cyber Security and assigned business partner teams to ensure the business aligns plans addressing security policies and standards are enforced in their products and services.</li><li>Authoritatively speaking on cyber related matters in front of governance boards on behalf of State Street, when necessary.</li><li>Create a high performing team and environment that promotes continuous growth opportunities. </li><li>Fully understand the 3LODs and the relationships and outcomes that drive collaborative success.</li><li>Providing primary support in OSI findings remediation efforts.</li><li>Developing Strategic and visionary solutions to address issues in the long-term.</li><li>Development of tactical KPIs that clearly shows area of improvement and trending to drive management actions.</li><li>Understand KRIs that drive remediation priority risk and controls activities</li><li>Execute the implementation of Global Cyber Security strategies and tactics aligned to key State Street risk and business needs.</li><li>Participate actively in the TPRM process evaluating cyber risk to the company and providing recommendations for controlling.</li><li>Create and deliver effective presentations as a means for communicating project and deliverable progress.</li><li>Build and nurture positive working relationships with clients with the intention to exceed client expectations.</li><li>Actively mentor and train team members on security processes, governance, and frameworks</li><li>Provide business understanding of technical problems for highly executable remediation activities.</li><li>Conflict resolution based on cost-benefit analysis to drive security value to business.</li></ul><p>Desired Outcomes</p><ul><li>Consistent and measurable business consumable work product.</li></ul><ul><li>Delivery of metrics that drive business and GCS actions to success.</li><li>Promotion of a collaborate team atmosphere for mutual success in business alignment to GCS requirements.</li></ul><p>Key relationships:</p><ul><li>Information Security Officers</li><li>Business and Functional Leaders</li><li>Head of SSBI IT</li><li>SVP, Cyber Fusion Center</li><li>SVP, Cyber Architecture &amp; Security Engineering</li><li>SVP, First Line Risk and Controls</li><li>3LOD Partners</li></ul><p></p><p>Education &amp; Preferred Qualifications</p><ul><li>12+ years of experience in cyber security risk and controls, a security related field or other information risk management function</li><li>Experience with communicating with the European Central Bank,</li><li>Modern technical aptitude and experience developing and implementing large-scale innovation.</li><li>Interaction with governing bodies, i.e. ECB, Bafin, Bundesbank, Prüfungsverband, etc.</li><li>Depth with modern technology stacks – n-tier, cryptography, data science, machine learning, cloud (hybrid)</li><li>Project Management experience leading large and small technical teams.</li><li>Experience operating in regulated environment</li><li>Bachelor’s degree in a security and/or technical field</li></ul><p>Critical Leadership Capabilities</p><ul><li>Driving results</li><li>Strategic Thinking</li><li>Collaborating &amp; Influencing</li><li>Change Management</li><li>Senior Executive communication</li><li>Personnel Management</li></ul>