Principal Product Manager, Security Controls & Strategy (Hybrid)

State Street; Princeton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K match

Comprehensive benefits

Job summary

State Street seeks a Principal Product Manager in Defensive Engineering Programs & Controls within Global Cyber Security. You will lead modernization of the security engineering control landscape, acting as a program manager and GRC strategist embedded with the security engineering team.

Responsibilities include defining control objectives, KPIs, and driving cross-functional initiatives with engineering, risk, compliance, legal, and audit.

Qualifications

• Bachelor's degree or higher in a related field is required.
• 10+ years of cybersecurity, product/program risk management experience expected.
• Certifications such as CISSP, CISM, CRISC, PMP are preferred.
• Familiarity with NIST, CIS Controls, ISO 27001 or similar frameworks.

Responsibilities

• Lead modernization of the security engineering control landscape across multiple cybersecurity domains.
• Define control objectives, success criteria, KPIs, and metrics for control effectiveness and risk reduction.
• Partner with engineering, risk, compliance, legal, and audit teams to drive implementation and remediation.
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable programs.
• Drive cross-functional programs from strategy through execution with executive reporting.

Skills

Program management

Security governance

Regulatory knowledge

Stakeholder mgmt

Executive communication

Financial services

Education

Bachelor's degree in Computer Science, Information Security, Engineering, Business, or a related field

10+ years of experience in cybersecurity, product management, program management, risk management, or governance functions

Certifications such as CISSP, CISM, CRISC, PMP, or equivalent

Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar

Job description

State Street seeks a Principal Product Manager in Defensive Engineering Programs & Controls within Global Cyber Security. You will lead modernization of the security engineering control landscape, acting as a program manager and GRC strategist embedded with the security engineering team.

Responsibilities include defining control objectives, KPIs, and driving cross-functional initiatives with engineering, risk, compliance, legal, and audit.