Managing Director, International Chief Information Security Officer

Position Summary

The International Chief Information Security Officer (International CISO) reporting to the SVP, Global Head of Business Information Security, serves as the senior cybersecurity executive responsible for cybersecurity strategy, governance, regulatory engagement, and cyber risk oversight across multiple international jurisdictions. The role provides leadership and accountability for regional cybersecurity programs while ensuring alignment with enterprise security strategies, local regulatory requirements, business objectives, and operational resilience expectations.

The International CISO acts as the primary cybersecurity advisor to regional executives, regulators, legal entities, risk committees, and business leaders, while coordinating closely with global cybersecurity functions to drive consistent security outcomes and regulatory compliance across international markets.

The International CISO balances global cybersecurity standards with regional business and regulatory requirements while driving execution across complex multinational environments. The International CISO is expected to operate as a trusted advisor to executive leadership and the regional boards, while being able to translate complex cybersecurity issues into business-oriented risk decisions.

Key Responsibilities

International Cybersecurity Leadership

• Lead cybersecurity strategies and execution across assigned international regions, including oversight of country and regional cybersecurity programs.
• Establish and maintain a consistent cybersecurity operating model across jurisdictions while accounting for local regulatory and business requirements.
• Serve as the senior cybersecurity executive for international legal entities and country governance structures.
• Drive regional cybersecurity transformation initiatives supporting emerging technologies, cloud adoption, AI, resilience, and digital modernization efforts.

Regulatory Engagement

• Serve as the accountable cybersecurity representative for regulatory examinations, audits, supervisory engagements, and regulatory reporting requirements.
• Maintain strong relationships with regional regulators, industry associations, and cybersecurity authorities.
• Monitor changes in cyber, technology risk, privacy, resilience, and operational risk regulations across assigned jurisdictions.
• Ensure cybersecurity programs meet local regulatory expectations and support enterprise compliance objectives.

Business Information Security

• Function as the primary cybersecurity advisor to regional business executives, country heads, legal entity boards, and management committees.
• Partner with business leaders to embed security into strategic initiatives, acquisitions, client solutions, and technology modernization programs.
• Support client cybersecurity due diligence activities and strategic customer engagements.
• Promote cybersecurity awareness and accountability throughout the regional businesses.

Incident Management and Resilience

• Provide leadership during significant cybersecurity incidents affecting international operations.
• Coordinate with cyber defense center, cyber threat intelligence, technical and business teams during regional cyber events.
• Ensure regional readiness for cyber incidents and operational disruptions through resilience testing exercises.
• Maintain oversight of regulatory reporting and regional stakeholder communications during cybersecurity events.

International Team Leadership

• Lead and develop regional cybersecurity staff in support of technical and business aligned teams.
• Establish succession planning, workforce development, and talent strategies.
• Build a high-performing, globally connected cybersecurity team capable of supporting regional growth and regulatory demands.
• Foster collaboration between international teams and enterprise security functions.

Required Qualifications

Education

• Bachelor’s degree in information security, Computer Science, Technology, Risk Management, Business, or related field.

Experience

• 15+ years of progressive cybersecurity, technology risk, or information security experience.
• Considerable experience leading cybersecurity programs across multiple countries and regulatory jurisdictions.
• Proven experience engaging directly with regulators and executive leadership.
• Experience within global financial services or other highly regulated industries.
• Demonstrated success leading large-scale cybersecurity transformation programs.

Technical and Regulatory Expertise

• Cybersecurity frameworks and controls.
• Operational resilience and business continuity.
• Cloud security and emerging technologies.
• AI security and governance.
• Data protection and privacy requirements.
• Identity and access management.
• Cyber threat intelligence and incident response.
• Third-party and supply chain risk management.

Success Measures

• Regulatory outcomes
• Reduction of material cybersecurity risk across the regional teams.
• Cyber resilience maturity improvements.
• Timely remediation of owned audit and regulatory findings.
• Business satisfaction and executive stakeholder engagement.
• Cybersecurity program maturity across regions.
• Talent development and organizational effectiveness.
• Successful execution of strategic cybersecurity initiatives.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement