Security Architect- MD

State Street•Quincy, MA

About The Position

The Managing Director, Security Architect is a senior leadership role responsible for defining and leading the firm's horizontal security architecture across AI Security, Data Protection, Cryptography, and Post-Quantum Cryptography (PQC). This leader ensures that architecture standards, controls, and secure-by-design patterns are coherent, consistent, and mutually reinforcing across all four disciplines. This role exists to connect and elevate what would otherwise be siloed domains. The Managing Director will set a unifying architectural vision, establish shared standards and reference designs, and drive the enterprise toward a defensible, forward-looking security posture that spans data, models, keys, and cryptographic systems. The leader balances long-range strategy — including the firm's PQC transition — with the practical delivery of controls embedded into engineering workflows. The successful candidate is a recognized architecture leader with deep, credible expertise across multiple security domains, the executive presence to influence senior technology and business leaders, and a proven ability to translate complex technical risk into actionable decisions. They will lead a team of domain architects and act as a force multiplier across the broader security and engineering organization.

Requirements

15+ years of experience in security architecture, security engineering, or related disciplines.
Demonstrated leadership across multiple security domains — ideally spanning AI security, data protection, and cryptography.
Deep, hands-on expertise in cryptographic architecture and modernization, with direct experience in PQC transition and cryptographic agility (CBOM).
Proven experience designing and scaling secure cloud-native architectures in large, regulated environments.
Hands-on experience securing AI/ML and GenAI systems, including governance, data protection, and model risk.
Strong background in regulatory audits, control remediation, and executive-level risk communication.
Experience leading global, multidisciplinary architecture or engineering teams.
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
Relevant certifications (CISSP, CISM, CCSP, cloud security, or architecture certifications) strongly preferred.

Nice To Haves

Advanced degree preferred.
Rare breadth of technical credibility across AI, data, and cryptographic security domains.
Strong bias toward automation, scale, and measurable outcomes.
Ability to unify siloed disciplines into a coherent architectural vision.
Executive presence with the ability to translate complex, cross-domain risk into business-aligned decisions.
Change agent mindset with a track record of modernizing security functions.
Customer-first perspective focused on trust, resilience, and long-term value.

Responsibilities

Define and steward a unified, enterprise-wide security architecture spanning AI Security, Data Protection, Cryptography, and PQC.
Establish shared architecture standards, guardrails, and reference designs that remain consistent across domains while addressing domain-specific risk.
Ensure architectural decisions in one discipline reinforce the others (e.g., data protection controls that account for cryptographic agility and AI data exposure).
Set the multi-year architectural roadmap and align it with business priorities, regulatory expectations, and the firm's technology transformation.
Lead the enterprise cryptographic architecture, including encryption, key management, secrets management, and machine identity.
Own the firm's Post-Quantum Cryptography (PQC) strategy and transition roadmap, driving cryptographic agility and inventory (CBOM) across the environment.
Establish standards for algorithm selection, key lifecycle, and crypto-agile design that support long-lived data protection.
Partner with Infrastructure and Platform teams to modernize cryptographic hygiene and reduce operational risk.
Set enterprise AI security architecture direction, including secure-by-default patterns for AI platforms, GenAI tooling, and AI agents.
Ensure AI threat modeling and controls (prompt injection, model inversion, data poisoning, adversarial AI) are integrated with data protection and cryptographic standards.
Guide the AI Security Architecture and Engineering teams to deliver coherent, defensible AI controls at scale.
Define architecture patterns for data discovery, classification, DLP, access governance, and automated protection controls.
Ensure data protection controls operate consistently across on-premises, cloud, SaaS, and AI environments.
Align data-centric controls with cryptographic and AI security standards to protect sensitive data throughout its lifecycle.
Integrate security architecture into DevSecOps pipelines through paved-road platforms, automation, and policy-as-code.
Enable secure adoption of AI, data, and cryptographic capabilities with minimal friction for engineering and business partners.
Establish reusable, secure-by-default patterns that scale across product teams.
Ensure architecture standards align with regulatory expectations (FFIEC, NIST, ISO, NYDFS, GDPR, SEC).
Serve as a credible technical voice in regulatory, audit, and client engagements across all four domains.
Drive data-driven architecture decisions using metrics on coverage, risk concentration, and control effectiveness.
Serve as a trusted technical advisor to the SVP, Data & AI Security, and to CISO, CIO, and architecture leadership.
Deliver concise executive briefings on cross-domain security posture, emerging risks, and architectural tradeoffs.
Build and lead a high-performing team of domain architects across AI, Data, and Cryptography.
Act as a multiplier for security engineering and platform teams through coaching and architectural leadership.

Benefits

Competitive compensation and comprehensive benefits.
Our retirement savings plan (401K) with company match
Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
Access to our Employee Assistance Program
Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
Eligibility for certain tax advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Vibrant employee networks