Identity & Access Security Officer

STATE STREET CORPORATION; Quincy (MA); On-site; USD 70,000 - 115,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision

Job summary

State Street Corporation in the United States is seeking an Information Security Officer to manage access, identity lifecycles, and security requests across Global Cybersecurity services. You will validate approvals, process access requests, and use PowerShell or automation to streamline tasks and reporting.

The role requires administering infrastructure applications, provisioning user access, monitoring configurations, and coordinating remediation to ensure policy compliance.

Qualifications

• Three+ years of experience in security administration, IAM, provisioning, or related control functions.
• Experience administering RACF in IBM z/OS.
• Familiar with IAM platforms like SailPoint or ServiceNow.
• PowerShell or scripting experience strongly preferred; Python/JavaScript is a plus.
• Ability to communicate across technical and business teams.

Responsibilities

• Process user access requests and ensure proper authorization and documentation.
• Administer and verify user IDs, entitlements, roles, and security group memberships.
• Provision access to applications not fully automated or integrated.
• Maintain audit-ready records of approvals, actions, evidence, and resolutions.
• Support access reviews and remediation to ensure policy compliance.

Skills

Identity and access management

Access provisioning

PowerShell scripting

Stakeholder communication

Attention to detail

Tools

RACF (IBM z/OS)

SailPoint

ServiceNow

PowerShell

Python

Job description

State Street Corporation in the United States is seeking an Information Security Officer to manage access, identity lifecycles, and security requests across Global Cybersecurity services. You will validate approvals, process access requests, and use PowerShell or automation to streamline tasks and reporting.

The role requires administering infrastructure applications, provisioning user access, monitoring configurations, and coordinating remediation to ensure policy compliance.