Principal Product Manager - Security Controls & Programs

State Street; Boston (MA); Hybrid; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls. You will lead modernization of our security engineering control landscape and drive cross‑functional programs across risk, compliance, audit, and engineering teams.

You will translate regulatory and audit requirements into technical roadmaps, define success metrics, and provide executive reporting to shape secure, compliant business outcomes.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• 10+ years in cybersecurity, product/program management, risk, or governance.
• Experience leading regulatory, audit, or security modernization initiatives.
• Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar.

Responsibilities

• Lead strategic initiatives to modernize and mature the security engineering control landscape across multiple cybersecurity domains.
• Define control objectives, success criteria, KPIs, and metrics that measure control effectiveness, coverage, and risk reduction.
• Partner with engineering, risk, compliance, legal, and audit teams to drive control implementation, remediation, and continuous improvement.
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable engineering programs.
• Drive complex cross-functional programs from strategy through execution while providing executive-level reporting and governance.

Skills

Strategic program management

Risk & compliance understanding

Executive communication

Cross-functional collaboration

Security controls knowledge

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

CISSP/CISM/CRISC/PMP certifications

Job description

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls. You will lead modernization of our security engineering control landscape and drive cross‑functional programs across risk, compliance, audit, and engineering teams.

You will translate regulatory and audit requirements into technical roadmaps, define success metrics, and provide executive reporting to shape secure, compliant business outcomes.