Cyber Security Technical Project Analyst

State Street in; Quincy (MA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Technical Project Analyst to lead compliance efforts with frameworks like Texas-RAMP and State RAMP. In this pivotal role, you will drive program outcomes, manage policy exceptions, and ensure readiness for audits with third-party organizations. Your expertise in cybersecurity frameworks and project management will be crucial in developing System Security Plans and optimizing processes. Join a collaborative team that values innovation and growth, and contribute to securing vital data and insights for the business.

Qualifications

• 5-10 years in technology risk management or information security.
• 5-7 years of technical project management experience.

Responsibilities

• Leading certification efforts for Texas-RAMP and State RAMP.
• Providing security control expertise for implementation and assessment readiness.

Skills

Cybersecurity frameworks (NIST CSF, NIST 800-53)

Texas-RAMP

State RAMP

FedRAMP

Agile methodologies

Scrum methodologies

Critical thinking

Problem-solving

Education

Bachelor's degree in IT or Cybersecurity

Job description

Cyber Security Technical Project Analyst (Finance)

What we are looking for:

State Street seeks to recruit an outstanding Cybersecurity Technical Project Analyst with an excellent understanding of cybersecurity frameworks (NIST CSF and NIST 800-53) and hands-on experience with the rigor required to achieve compliance. Experience with frameworks such as Texas-RAMP, State RAMP, or FedRAMP is highly preferred.

What you will be responsible for:

1. Leading certification efforts for Texas-RAMP and State RAMP.
2. Driving program outcomes to meet deliverables within timelines.
3. Establishing processes to meet administrative requirements of Texas-RAMP and State RAMP.
4. Providing security control expertise for implementation and assessment readiness.
5. Reviewing documentation, evaluating procedures, and preparing teams for audits with third-party organizations like 3PAO.
6. Managing policy exceptions, documenting them, and identifying controls and remediation plans.
7. Developing and updating System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Actions & Milestones (POAMs).
8. Breaking down programs into components, tracking dependencies, and optimizing processes.
9. Escalating issues timely and creating accurate project reports.
10. Working with 3PAO for engagement and certification processes.

What we value:

• Strong teamwork, communication, critical thinking, and problem-solving skills.
• Ability to work collaboratively across a global organization.
• Self-starter attitude with the ability to work independently and influence others.
• Experience with Agile and Scrum methodologies.

Education and Preferred Qualifications:

• Bachelor's degree in IT or Cybersecurity.
• 5-10 years in technology risk management, information security, or related fields.
• 5-7 years of technical project management experience.
• 2+ years of RAMP experience.
• Consulting experience is a plus.
• Strong understanding of IT and Cybersecurity concepts, Cloud technologies.
• Excellent verbal and written communication skills.

Why this role is important:

Our Global Cyber Security team is vital for enabling our business to deliver data and insights securely. We drive digital transformation with industry best practices and advanced technologies, creating a collaborative environment for innovation and growth.