Technical Cyber Security Advisory, Vice President

Salary: £60,000 - 90,000 per year

Requirements:

• We are looking for a strong technical candidate with hands-on experience who can translate complex technical solutions for senior technology and business stakeholders.
• We need technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders.
• We value practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation.
• We require security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls.
• We look for strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions.
• We expect the ability to convert regulatory expectations and audit findings into pragmatic implementation plans in a complex banking environment.
• We need excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language.
• We value sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality.
• A bachelors degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline is preferred, with equivalent industry experience considered.
• We typically look for 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role.
• Relevant certifications such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA, or vendor-specific certifications are valued.
• Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design is required.
• Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred.
• We need the ability to work with complex and advanced cyber security environments.
• The candidate must be able to handle confidential and sensitive information appropriately.

Responsibilities:

• We provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters.
• We review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews.
• We translate security insights into practical risk-based remediation plans that reduce risk exposure for the organization.
• We lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking.
• We drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability.
• We prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership.
• We act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes.
• We support client, business, and external engagement where specialist cyber input is required, presenting our cyber posture and improvement activity in a clear and credible manner.
• Some travel may be required for regional stakeholder, client, industry, or regulatory engagement.
• We may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours.

Technologies:

• Cloud
• IAM
• Support
• Network
• Security

More:

We are State Street, a global partner to institutional investors, helping them manage risk, respond to challenges, and drive performance and profitability. Our Global Cybersecurity organization connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities, and this Vice President of Cyber Security role is part of the Regional CISO organization for UK & Ireland. The position is based in London with a hybrid working arrangement and regular presence in our London office, working UK business hours with flexibility to support global stakeholders and time-sensitive cyber or regulatory matters. We offer inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks, and we are an equal opportunity employer committed to fostering an environment where every employee feels valued and empowered.

last updated 35 week of 2026