Jobs · Information Technology · Massachusetts

Security Platform Governance & Resilience Lead

State Street · Quincy, MA · 1 mo ago
Information Technology$120k–$203k/yrFull-time
We need to output HTML fragment only, with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate. We need to parse the posting. Location: Boston/Quincy, Massachusetts, United States – location info maybe minor metadata; we can fold into a short

or drop. Probably include location in a short paragraph under maybe "About the role"? But we have no heading for location; we can include a

with location. We need sections: - About the role: The description after "Who we are looking for" includes overview of role. Could be "About the role". We'll put that as

About the role

then a

summarizing the description: State Street seeking Security Platform Governance & Resilience Lead ... etc. Must preserve all substantive info, not invent. We can include the paragraph(s) describing role purpose. - Responsibilities: The bullet list under "What you will be responsible for". We'll create

Responsibilities

then
  • each bullet. - Requirements: The "What we value" section lists skills. Could be considered Requirements or Skills. The instruction says we can have sections: Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which to include based on content. We have "What we value These skills will help you succeed in this role" list of skills. That's like Skills. Also "Education & Preferred Qualifications" section includes education and qualifications. So we can have: -

    Qualifications

    for Education & Preferred Qualifications. -

    Skills

    for the "What we value" list. - Benefits: The "Why this role is important to us" is not benefits. Benefits are described later: "Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: ..." So we have Benefits section. - Pay: Salary Range $120,000 - $202,500 Annual. So we include Pay. - Schedule: Not mentioned. No schedule info. So we omit Schedule. We also have location; we can include a short

    maybe before sections. We must not include boilerplate like "Why this role is important to us" maybe we could incorporate into About the role? But we already have About the role; we could add that paragraph as part of About the role. However the instruction: "Prefer a few substantive sections over many thin ones." We could combine "Why this role is important to us" into About the role or maybe into Responsibilities? It's more about importance; could be part of About the role. But we already have About the role describing role purpose; we could add that as additional paragraph. We must preserve all substantive information; we cannot drop any content. So we need to ensure we include all info from posting, except boilerplate/navigation/legal/EEO etc. So we need to include: - Location (Boston/Quincy, Massachusetts, United States) maybe as a short p. - Who we are looking for description (the paragraph about Security Platforms team etc.) – part of About the role. - What you will be responsible for bullet list – Responsibilities. - What we value list – Skills. - Education & Preferred Qualifications – Qualifications. - Why this role is important to us – maybe incorporate into About the role or a separate section like "Role Importance". But we only have allowed headings list; we could add a heading like "About the role" and include both the description and importance. That's okay. - Salary Range – Pay. - Benefits description – Benefits. - Also maybe "About State Street" and "As an Equal Opportunity Employer..." etc are boilerplate/EEO; we should remove. - Also "Job Application Disclosure" etc remove. - Also "Read our CEO Statement" etc remove. - Also "Discover more information on jobs at StateStreet.com/careers" remove. - Also "Job ID: R-798220" remove. Thus final HTML: maybe start with a

    for location, then sections. We must not include or . Just fragment. Let's craft. Location paragraph:

    Location: Boston/Quincy, Massachusetts, United States

    About the role:

    About the role

    then paragraphs: combine the "Who we are looking for" paragraph and "Why this role is important to us" paragraph. We need to preserve all substantive info: The "Who we are looking for" paragraph: "State Street is seeking a Security Platform Governance & Resilience Lead for our Security Platforms team, which is part of the State Street Cyber Fusion Center. The Security Platforms team designs, manages and supports the security technologies that enable cybersecurity operations across State Street. These platforms are critical to the firm's security posture, enabling threat detection, incident response, threat hunting, vulnerability management, data protection, automation and other key cybersecurity functions. This role will be responsible for driving governance, operational resilience, service management, process maturity and performance management across the Security Platforms portfolio. The successful candidate will partner closely with platform engineering, security operations, risk, compliance, audit and regulatory stakeholders to ensure security platforms remain resilient, well governed, measurable and audit ready. Success in this role will require strong operational leadership, governance expertise, stakeholder management skills and a solid understanding of cybersecurity operations and supporting technologies." Then "Why this role is important to us": "Security Platforms provides and operates many of the foundational technologies used by State Street's Cyber Fusion Center and broader cybersecurity organisation. As our platform portfolio continues to expand in scope, capability and regulatory obligations, maintaining strong governance, operational resilience and service management practices becomes increasingly important. The Security Platform Governance & Resilience Lead will help ensure platform services remain scalable, resilient, measurable and aligned with regulatory expectations while enabling engineering teams to focus on delivering secure and reliable cybersecurity capabilities. This role will serve as a key partner to platform leadership, helping drive operational maturity, audit readiness, resilience planning, governance excellence and continual improvement across the Security Platforms function." We'll combine into maybe two

    elements under the heading. Responsibilities: list each bullet. Let's extract bullets: - Establish and maintain governance processes across the Security Platforms organisation. - Develop and manage platform health, operational performance and resilience metrics. - Create executive, operational and management reporting for platform services. - Own governance of platform roadmaps, strategic initiatives and service improvement programmes. - Build and operate demand intake, prioritisation and governance processes for Security Platforms. - Coordinate audit, regulatory examination and compliance activities affecting the platform portfolio. - Establish repeatable evidence collection processes supporting internal and external audits. - Develop, maintain and continuously improve platform SOPs, standards, control documentation and operating procedures. - Drive operational resilience planning, testing and continuous improvement activities. - Partner with platform engineering teams to improve operational maturity and consistency across services. - Identify, track and drive remediation of operational risks, issues and control gaps. - Develop service management practices including KPIs, SLAs, service reviews and continual improvement programmes. - Coordinate governance activities across Cyber Defence, Incident Response, Detection Engineering, Identity & Access Management, Risk Management, Compliance and Internal Audit teams. - Support leadership decision-making through meaningful metrics, dashboards and performance reporting. - Promote a culture of operational excellence, accountability and continuous improvement. We'll put each as

  • . Skills: list from "What we value": - Strong understanding of cybersecurity operations and supporting platform functions. - Experience operating in highly regulated financial services or similarly regulated environments. - Excellent governance, process design and operational management capabilities. - Experience supporting internal audit, regulatory examinations and compliance activities. - Strong analytical skills with the ability to translate operational data into meaningful insights. - Experience developing service health metrics, dashboards and executive reporting. - Understanding of operational resilience, risk management and control frameworks. - Strong programme and stakeholder management skills. - Ability to influence senior stakeholders across technology, cybersecurity and business functions. - Experience building sustainable operating models and scalable governance processes. - Strong written and verbal communication skills. - Ability to balance operational, regulatory and strategic priorities across a global organisation. Qualifications: Education & Preferred Qualifications: - Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business Management or a related discipline is beneficial but not required. - Equivalent practical experience in cybersecurity operations, governance, service management, risk management or technology operations will be considered in lieu of formal education. - 10+ years of experience in cybersecurity, technology operations, governance, risk, compliance or service management functions. - Experience supporting cybersecurity operations, engineering or security platform organisations. - Working knowledge of security technologies such as EDR, SIEM, SOAR, DLP, Identity Security and Cloud Security platforms. - Experience managing audit deliverables, evidence requests and regulatory engagements. - Experience developing governance frameworks, operating models and service management processes. - Familiarity with Archer, ServiceNow, Jira or similar governance and workflow platforms. - Industry certifications such as CISSP, CISM, CRISC, ITIL or equivalent are desirable but not required. Benefits: description: "Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans. For a full overview, visit https://hrportal.ehr.com/statestreet/Home." We should keep the URL? It's substantive; we can keep as part of paragraph. Pay: Salary Range $120,000 - $202,500 Annual. Also note: "The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ." That's substantive; we should include that sentence as well. Thus Pay section:

    Pay

    Salary Range $120,000 - $202,500 Annual. The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

    We should not include schedule. Now ensure we don't include any boilerplate like "About State Street", "As an Equal Opportunity Employer", etc. Now produce HTML fragment. Let's craft:

    Location: Boston/Quincy, Massachusetts, United States

    About the role

    State Street is seeking a Security Platform Governance & Resilience Lead for our Security Platforms team, which is part of the State Street Cyber Fusion Center. The Security Platforms team designs, manages and supports the security technologies that enable cybersecurity operations across State Street. These platforms are critical to the firm's security posture, enabling threat detection, incident response, threat hunting, vulnerability management, data protection, automation and other key cybersecurity functions. This role will be responsible for driving governance, operational resilience, service management, process maturity and performance management across the Security Platforms portfolio. The successful candidate will partner closely with platform engineering, security operations, risk, compliance, audit and regulatory stakeholders to ensure security platforms remain resilient, well governed, measurable and audit ready. Success in this role will require strong operational leadership, governance expertise, stakeholder management skills and a solid understanding of cybersecurity operations and supporting technologies.

    Security Platforms provides and operates many of the foundational technologies used by State Street's Cyber Fusion Center and broader cybersecurity organisation. As our platform portfolio continues to expand in scope, capability and regulatory obligations, maintaining strong governance, operational resilience and service management practices becomes increasingly important. The Security Platform Governance & Resilience Lead will help ensure platform services remain scalable, resilient, measurable and aligned with regulatory expectations while enabling

Similar jobs

Platform Security Lead

SprezzaturaUnited States· 3 mo ago
RemoteManagement$165k–$175k/yrapply on workforcenow.adp.com