Head of Security Architecture – Managing Director

State Street

Head of Security Architecture at State Street, managing cybersecurity strategies and secure design operations. Establishing standards and frameworks for resilient security across technology environments.

Posted 7/1/2026full-timeQuincy • Massachusetts, New Jersey, Pennsylvania, Texas • 🇺🇸 United StatesLead💰 $175,000 - $287,500 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Drive the vision, strategy, and mission accomplishment of the entire Security Architecture organization.
Establish and scale an enterprise security architecture model that embeds secure-by-design principles into technology development, engineering, and operational processes.
Define and maintain enterprise security baselines, architecture standards, and design guardrails that enable consistent implementation of security controls across cloud, SaaS, infrastructure, application, API, data, and AI environments.
Develop and operationalize reference architectures and reusable security patterns that accelerate technology delivery while reducing cyber risk and architectural complexity.
Establish and lead a Security Architecture Center of Excellence responsible for security design guidance, threat-informed architecture practices, technology standards, and cybersecurity innovation.
Drive adoption of threat modeling as a foundational design discipline, ensuring security risks are identified and addressed before deployment and operationalization.
Lead security architecture and design reviews for strategic technology initiatives, enabling informed risk decisions and alignment with enterprise cybersecurity requirements.
Partner with technology product owners, engineering organizations, and enterprise architects to ensure security is designed into platforms, applications, services, and infrastructure rather than applied through downstream controls.
Establish target-state architecture and drive integration across cyber defense, threat intelligence, vulnerability management, analytics, engineering, and operational response capabilities.
Drive the design and evolution of integrated security architectures that improve visibility, detection, investigation, and response across the enterprise.
Lead architecture strategy for frontier technologies including cloud-native platforms, AI-enabled solutions, automation technologies, APIs, advanced analytics, and autonomous systems.
Ensure security architectures address dynamic risks associated with emerging technologies, third-party integrations, cloud adoption, and evolving threat actor capabilities.
Collaborate closely with Fusion & Security Operations, Platform Security, enterprise architecture, and technology infrastructure teams to ensure cohesive, end-to-end protection across the technology ecosystem.
Define clear accountability models, governance structures, and performance metrics that enable technology teams to effectively manage cyber risk while aligning to enterprise standards and regulatory expectations.

Requirements

What you’ll need

15 years or more leading large-scale cybersecurity architecture, engineering, security operations, or technology transformation functions in complex, global environments, with at least 5 years of cybersecurity leadership experience preferred.
Proven ability to successfully drive and develop teams that work remotely and across multiple geographic time zones.
Deep expertise in security architecture, secure design, threat modeling, cyber defense, security operations, cloud technologies, and modern engineering practices.
Demonstrated leadership in building and scaling secure-by-design programs, architecture governance functions, and enterprise cybersecurity standards.
Strong working knowledge of cloud-native architectures, SaaS platforms, APIs, infrastructure technologies, data ecosystems, and emerging AI/LLM technologies and their associated cyber risk implications.
Experience establishing enterprise security baselines, reference architectures, architecture governance processes, and reusable security patterns at scale.
Strong knowledge of cyber threat actors, tactics, techniques, procedures, tradecraft, and noteworthy attacks.
Exceptional communication skills (oral and written) with a history of successfully engaging Boards of Directors, executive management teams, regulators, and senior business leaders.
Understanding of technology systems including networks, applications, infrastructure services, cloud platforms, identity systems, security tooling, and data architectures.
Experience working closely with Fusion Centers, Security Operations Centers, cyber threat intelligence teams, vulnerability management organizations, incident response teams, and security engineering functions.
Must be a self-starter, self-motivated, and able to work independently with little oversight while managing a large, globally distributed team.
Able to develop and operate within a set financial budget.

Benefits

Comp & perks

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Security ArchitectureThreat ModelingCyber DefenseCloud TechnologiesSaaS PlatformsAPIsInfrastructure TechnologiesData EcosystemsAI/LLM TechnologiesArchitecture Governance

Soft Skills

Exceptional Communication SkillsTeam LeadershipSelf-MotivatedIndependent Work