Principal Product Manager - Security Controls & Programs

State Street; Boston (MA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls within Global Cyber Security. This role leads modernization of the security engineering control landscape, acting as both program manager and GRC strategist within security engineering.

You will drive cross-functional programs, translate regulatory requirements into roadmaps, and provide executive-level governance and reporting. Financial services experience is a plus.

Qualifications

• Bachelor's degree required in CS/InfoSec/Engineering/Business or related field.
• 10+ years in cybersecurity, product/program management, risk or governance roles.
• Certifications such as CISSP, CISM, CRISC, PMP preferred.
• Familiarity with NIST, CIS Controls, ISO 27001 or similar security frameworks.

Responsibilities

• Lead modernization of security engineering control landscape across multiple cybersecurity domains.
• Define control objectives, KPIs, metrics to measure effectiveness and risk reduction.
• Partner with engineering, risk, compliance, legal, and audit to drive control implementation and remediation.
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable programs.
• Drive cross-functional programs from strategy to execution with executive reporting and governance.

Skills

Leadership

Program management

Executive communication

Stakeholder management

Risk management

Education

Bachelor's degree in Computer Science/Information Security/Engineering/Business

CISSP/CISM/CRISC/PMP or equivalent

Job description

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls within Global Cyber Security. This role leads modernization of the security engineering control landscape, acting as both program manager and GRC strategist within security engineering.

You will drive cross-functional programs, translate regulatory requirements into roadmaps, and provide executive-level governance and reporting. Financial services experience is a plus.