Cybersecurity Technical Project Analyst

State Street in; Quincy (MA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is on the lookout for a Cybersecurity Technical Project Analyst to join their dynamic team. In this pivotal role, you will lead certification efforts for critical cybersecurity frameworks while ensuring compliance and enhancing program outcomes. You will engage with third-party organizations, manage policy exceptions, and develop comprehensive security plans. The ideal candidate will possess strong communication and problem-solving skills, along with a solid background in technology risk management. This is a fantastic opportunity for those passionate about innovation and driving meaningful change in cybersecurity.

Qualifications

• 5-10 years in technology risk management or cybersecurity.
• 5-7 years in technical project management.

Responsibilities

• Leading certification efforts for Texas-RAMP and State RAMP.
• Developing and updating System Security Plans and Security Assessment Reports.

Skills

Cybersecurity Frameworks (NIST CSF, NIST 800-53)

Texas-RAMP

State RAMP

FedRAMP

Agile Methodologies

Scrum Methodologies

Communication Skills

Problem-Solving Skills

Critical Thinking

Education

Bachelor's degree in IT or Cybersecurity

Job description

Cybersecurity Technical Project Analyst (Finance)

State Street seeks to recruit an outstanding Cybersecurity Technical Project Analyst with an excellent understanding of cybersecurity frameworks (NIST CSF and NIST 800-53) and hands-on experience with the rigor required to achieve compliance with them. Experience with frameworks such as Texas-RAMP, State RAMP, or FedRAMP is highly preferred.

Responsibilities include:

1. Leading certification efforts for Texas-RAMP and State RAMP.
2. Driving program outcomes by ensuring timely delivery of objectives.
3. Establishing processes to meet administrative requirements of RAMP frameworks.
4. Providing security control expertise for implementation and assessment readiness.
5. Reviewing documentation, evaluating procedures, and preparing teams for audits with third-party organizations like 3PAO.
6. Managing policy exceptions and documenting compensating controls and remediation plans.
7. Developing and updating System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Actions & Milestones (POAMs).
8. Breaking down programs into components, tracking dependencies, and proactively resolving issues.
9. Escalating project issues and creating status reports.
10. Engaging with Third-Party Assessment Organizations (3PAO) to obtain certifications.

Desired skills and qualities:

• Strong teamwork, communication, critical thinking, and problem-solving skills.
• Ability to work collaboratively across a global organization.
• Self-starter capable of independent and team work.
• Influence outside of immediate team.
• Experience with Agile and Scrum methodologies.

Qualifications:

• Bachelor's degree in IT or Cybersecurity.
• 5-10 years in technology risk management or cybersecurity.
• 5-7 years in technical project management.
• Over 2 years of RAMP experience.
• Consulting experience is a plus.
• Strong understanding of IT, cybersecurity, and cloud technologies.
• Excellent verbal and written communication skills.

We value diverse backgrounds and experiences. If you are passionate about change, innovation, and data-driven decision-making, you might be a great fit.