Principal Security Controls & Programs Lead

State Street; Clifton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health coverage

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls within Global Cyber Security. The role leads modernization of the security engineering control landscape and serves as a bridge between security engineering, risk, compliance and audit teams.

The position requires 10+ years in cybersecurity or related fields, strong program management, and familiarity with NIST and ISO 27001. Hybrid work model with potential collaboration across global teams.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, Business, or related field.
• 10+ years in cybersecurity, product management, program management, risk management, or governance functions.
• Experience leading regulatory, audit, controls, or security modernization initiatives.
• Certifications such as CISSP, CISM, CRISC, PMP, or equivalent preferred.
• Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar.

Responsibilities

• Lead modernization of the security engineering control landscape across cybersecurity domains.
• Define control objectives, KPIs, and metrics to measure control effectiveness, coverage and risk reduction.
• Collaborate with engineering, risk, compliance, legal and audit teams to drive control implementation and remediation.
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable programs.
• Manage cross-functional programs from strategy through execution with executive reporting and governance.

Skills

Cybersecurity program mgmt

Governance & risk

Executive communication

Stakeholder management

Regulatory frameworks

Education

Bachelor's degree in CS/IS/Engineering/Business

Certifications such as CISSP/CISM/CRISC/PMP

Job description

State Street is seeking a Principal Product Manager for Defensive Engineering Programs & Controls within Global Cyber Security. The role leads modernization of the security engineering control landscape and serves as a bridge between security engineering, risk, compliance and audit teams.

The position requires 10+ years in cybersecurity or related fields, strong program management, and familiarity with NIST and ISO 27001. Hybrid work model with potential collaboration across global teams.