Secure Configuration Management Compliance Analyst , AVP

State Street; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K with company match

Health insurance

Dental & Vision

Paid time off

Short-term disability

EAP access

Annual performance awards

Job summary

State Street is seeking a driven Secure Configuration Management Compliance Analyst in Massachusetts. You will oversee configuration compliance, work with IT and security teams to remediate issues, and develop metrics to track progress.

The role emphasizes independent work, strong communication, and ongoing process improvements. The position focuses on monitoring IT configurations, ensuring adherence to CIS/NIST/ISO 27001 standards, and delivering clear reports to management.

Qualifications

• 4+ years in a security compliance role.
• Bachelor’s degree in Information Security, CS, or IT.
• Familiar with CIS, NIST, ISO 27001 frameworks.
• Experience with compliance tracking and reporting tools.

Responsibilities

• Monitor configurations to ensure policy compliance and best practices.
• Detect and notify on non-compliance issues to stakeholders.
• Remediate violations with IT and security teams.
• Coordinate across departments for swift issue resolution.
• Develop metrics to evaluate configuration compliance.
• Prepare regular reports for management and stakeholders.
• Identify opportunities to improve security configuration processes.
• Drive initiatives to strengthen compliance and security measures.

Skills

Security analytics

Stakeholder comms

Independent worker

Detail oriented

Education

Bachelor's degree in Information Security or related field

Tools

Compliance tracking tools

Job description

Role:

Secure Configuration Management Compliance Analyst

Who we are looking for

We are looking for a driven and analytical Secure Configuration Management Compliance Analyst. A candidate should have around five years of experience in security configuration management and be comfortable working as an individual contributor, with excellent communication skills, and occasionally representing the department on broader initiatives.

Why this role is important to us

The analyst role ensures that our IT systems and infrastructure maintain compliance with security policies and standards, protecting our organization from vulnerabilities and threats. As part of State Street’s broader technology risk and controls strategy, the SCM Program Compliance Analyst plays a critical role in maintaining our security posture by ensuring that configurations are monitored, evaluated, and remain compliant. This work will help mitigate risks and safeguard the organization data, assets, and reputation.

What you will be responsible for

Compliance Oversight and Governance

• Monitor system configurations to ensure compliance with security policies, standards, and best practices
• Detect non-compliance issues and notify relevant stakeholders promptly

Stakeholder Engagement and Remediation

• Work closely with IT and security teams to address and remediate compliance violations
• Facilitate effective communication among departments to ensure swift resolution of issues

Metrics and Reporting

• Develop and maintain metrics to evaluate configuration compliance
• Prepare regular reports for management and stakeholders, highlighting potential risks and remediation progress

Process Development and Continuous Improvement

• Identify opportunities to enhance security configuration management processes
• Implement improvements and drive initiatives that strengthen compliance and security measures

What We Value

• Ability to analyze complex data sets related to configurations, identify patterns, and pinpoint non-compliance issues effectively.
• Excellent verbal and written communication abilities to convey complex compliance issues clearly to technical and non-technical stakeholders
• Detail-oriented with a proactive approach to identifying and mitigating risks
• Capability to work independently and collaboratively
• Strong organizational and time management skills

Education & Preferred Qualifications

• 4+ years of experience in a security compliance or related role
• A Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field
• Knowledge of security frameworks and standards such as CIS, NIST, or ISO 27001
• Experience with compliance tracking and reporting tools

Salary Range

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-787169