Security Platforms: Governance & Resilience Lead

State Street

Quincy (MA)

On-site

USD 120,000 - 203,000

Full time

30 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

State Street in Boston/Quincy is seeking a Security Platform Governance & Resilience Lead to drive governance, operational resilience, and service management across the Security Platforms portfolio. You will partner with platform engineering, security operations, risk, compliance, audit and regulatory teams to ensure resilience and audit readiness.

You will develop metrics, executive reporting, roadmaps, and governance processes, lead risk remediation, and promote continuous improvement through

Qualifications

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business Management or related discipline is beneficial but not required.
Equivalent practical experience in cybersecurity operations, governance, service management, risk management or technology operations will be considered in lieu of formal education.
10+ years of experience in cybersecurity, technology operations, governance, risk, compliance or service management functions.
Experience supporting cybersecurity operations, engineering or security platform organisations.
Working knowledge of security technologies such as EDR, SIEM, SOAR, DLP, Identity Security and Cloud Security platforms.
Experience managing audit deliverables, evidence requests and regulatory engagements.
Experience developing governance frameworks, operating models and service management processes.
Familiarity with Archer, ServiceNow, Jira or similar governance and workflow platforms.
Industry certifications such as CISSP, CISM, CRISC, ITIL or equivalent are desirable.

Responsibilities

Establish and maintain governance processes across the Security Platforms organisation.
Develop and manage platform health, operational performance and resilience metrics.
Create executive, operational and management reporting for platform services.
Own governance of platform roadmaps, strategic initiatives and service improvement programmes.
Build and operate demand intake, prioritisation and governance processes for Security Platforms.
Coordinate audit, regulatory examination and compliance activities affecting the platform portfolio.
Establish repeatable evidence collection processes supporting internal and external audits.
Develop, maintain and continuously improve platform SOPs, standards, control documentation and operating procedures.
Drive operational resilience planning, testing and continuous improvement activities.
Partner with platform engineering teams to improve operational maturity and consistency across services.
Identify, track and drive remediation of operational risks, issues and control gaps.
Develop service management practices including KPIs, SLAs, service reviews and continual improvement programmes.
Coordinate governance activities across Cyber Defence, Incident Response, Detection Engineering, Identity & Access Management, Risk Management, Compliance and Internal Audit teams.
Support leadership decision-making through meaningful metrics, dashboards and performance reporting.
Promote a culture of operational excellence, accountability and continuous improvement.