Cyber Product Analyst

Global Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks by understanding the risks these attacks present and mitigating them through a robust, continuously evolving, cybersecurity program and control environment. Fusion & Security Operations (F&SO) is one of five functions within GCS, working to provide real-time knowledge of cyber threats to better prepare State Street for future risks.

Responsibilities

• Perform operational and tactical tasks that execute the vision, roadmap, and lifecycle for cybersecurity products supporting critical banking operations.
• Partner with technology and business stakeholders to prioritize control coverage and integration across platforms.
• Configure and update products aligned with internal risk frameworks and external regulatory standards.
• Collaborate with enterprise IT and engineering teams to ensure adherence to application governance requirements including SDLC, access management, resiliency, audit, and control standards.
• Serve as technical SME to address audit findings and implement remediation plans.
• Engage in vendor relationships and oversee technology lifecycle for cybersecurity tools.
• Evaluate emerging technologies to maintain a best-in-class security posture.
• Drive engineering work streams to deliver control outcomes and automation capabilities.
• Apply agile and project management methodologies for timely delivery of initiatives.

Skills

• Collaborate across a globally distributed, high-performing team of cybersecurity professionals.
• Execute responsibilities within a culture of accountability, innovation, and continuous improvement.
• Deliver results that support succession planning within the cybersecurity product organization.
• Support the Cyber Product Managing Director with details and assessments that inform product vision, project health, and executive reporting.
• Respond to inquiries from leadership and collaborate across risk, compliance, and technology functions.
• Exceptional communication, strategic thinking, and change management skills.

Requirements

• Bachelor's Degree in Cybersecurity or related technical discipline.
• 3-5 years of experience in cybersecurity, technology risk, or related fields, with at least 2 years supporting cyber security products.
• Proven track record in information systems or product management within regulated financial services environments.
• Strong understanding of banking technology stacks (cloud, data, automation) and cybersecurity frameworks (NIST, ISO 27001).

Qualifications

• Preferred experience with enterprise-grade security technologies, cloud platforms, and regulatory compliance tools including but not limited to: Splunk, CrowdStrike, Qualys, AWS, CI/CD pipeline security, Veracode, Lakehouse technologies for threat analytics, Archer, and ServiceNow GRC.
• Preferred certifications include but are not limited to: CISSP, CISM, CRISC, and CGEIT.

Pay

$120,000 - $202,500 Annual. The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location, the applicable range could differ.

Benefits

• Retirement savings plan (401K) with company match.
• Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages.
• Paid-time off including vacation, sick leave, short-term disability, and family care responsibilities.
• Access to Employee Assistance Program.
• Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans).
• Eligibility for certain tax-advantaged savings plans.