Cyber Policy Enforcement Lead, VP

State Street•Quincy, MA

5d•$120,000 - $202,500

About The Position

The Cyber Policy Enforcement Lead, VP leads the enterprise capability responsible for ensuring Cyber Policies and Standards are consistently enforced across the organization. The role drives accountability for cyber compliance through structured enforcement mechanisms, timely risk-based escalation, and consequence management. It is the central coordination point for enforcement activities, helping embed requirements into business processes, establish clear ownership, escalate risks appropriately, and monitor corrective actions through resolution. The VP partners with cybersecurity subject-matter experts, business stakeholders, and senior leadership to define enforceable requirements, monitor performance metrics, identify consequence considerations, and provide reporting that supports management decision-making. The role also develops and improves enforcement and governance frameworks, oversees compliance performance and risk trends, and drives remediation and continuous improvement.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field.
At least 10 years of progressive experience in cybersecurity, technology risk, operational risk, governance, risk and compliance, or related disciplines.
Demonstrated experience designing and implementing policy enforcement, issue management, escalation, and/or consequence management frameworks within a large, complex organization.
Strong understanding of cybersecurity governance, risk management, control frameworks, and regulatory expectations within highly regulated industries.
Experience leading cross-functional initiatives with cybersecurity subject-matter experts, technology teams, and business partners to achieve risk reduction and compliance objectives.
Experience managing enterprise-scale stakeholder relationships across business, technology, risk, audit, and executive leadership functions.
Proven ability to drive accountability and influence senior stakeholders to address non-compliance, remediate risks, and improve control effectiveness.
Experience developing and presenting executive-level reporting, risk assessments, metrics, and recommendations to senior management, risk committees, and governance forums.
Deep understanding of cybersecurity governance, policy and standards management, control monitoring, and risk oversight practices.
Strong knowledge of industry frameworks and regulations, including NIST, ISO 27001, COBIT, FFIEC, SEC, and other relevant regulatory requirements.
Strong analytical and problem-solving skills, including the ability to assess complex risks and recommend practical, risk-based solutions.
Ability to influence without direct authority and challenge stakeholders while maintaining strong working relationships.
Strong executive reporting skills, including the ability to communicate complex cyber risk, compliance, and enforcement insights clearly and actionably to senior management and governance forums.

Nice To Haves

Master's degree.
Relevant industry certifications, such as CISSP, CISM, CRISC, CGEIT, or CISA.

Responsibilities

Lead the enterprise Cyber Policy Enforcement and Consequence Management capability to support consistent application of Cyber Policy and Standard requirements across business units and functions.
Develop, implement, and continuously enhance policy enforcement, escalation, consequence management frameworks, processes, and governance mechanisms.
Partner with Global Cybersecurity, Technology, Risk, Compliance, and business subject-matter experts and stakeholders to establish enforcement priorities, remediation expectations, and consequence management activities.
Integrate policy enforcement requirements into business processes, governance forums, and risk management practices.
Facilitate engagement forums to review compliance performance, residual risks, remediation progress, and applicable enforcement actions.
Prepare and present compliance, enforcement, and risk insights to senior leadership, risk committees, and governance forums.
Monitor compliance performance and risk trends, identify systemic issues and root causes, and drive sustainable remediation and continuous improvement.
Define and track key performance indicators and use automation opportunities to improve monitoring, reporting, and workflow efficiency.
Periodically review and update enforceable requirements, monitoring expectations, and consequence considerations to maintain their relevance and effectiveness.

Benefits

Retirement savings plan (401K) with company match.
Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
Paid time off, including vacation, sick leave, short-term disability, and leave for family care responsibilities.
Access to an Employee Assistance Program.
Incentive compensation, including eligibility for annual performance-based awards, excluding certain sales roles subject to sales incentive plans.
Eligibility for certain tax-advantaged savings plans.
Inclusive development opportunities.
Flexible work-life support.
Paid volunteer days.
Employee networks.