Senior Security Configuration & Compliance Analyst

State Street; Quincy (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K with company match

Health insurance

Dental & Vision

Paid time off

Short-term disability

EAP access

Annual performance awards

Job summary

State Street is seeking a driven Secure Configuration Management Compliance Analyst in Massachusetts. You will oversee configuration compliance, work with IT and security teams to remediate issues, and develop metrics to track progress.

The role emphasizes independent work, strong communication, and ongoing process improvements. The position focuses on monitoring IT configurations, ensuring adherence to CIS/NIST/ISO 27001 standards, and delivering clear reports to management.

Qualifications

• 4+ years in a security compliance role.
• Bachelor’s degree in Information Security, CS, or IT.
• Familiar with CIS, NIST, ISO 27001 frameworks.
• Experience with compliance tracking and reporting tools.

Responsibilities

• Monitor configurations to ensure policy compliance and best practices.
• Detect and notify on non-compliance issues to stakeholders.
• Remediate violations with IT and security teams.
• Coordinate across departments for swift issue resolution.
• Develop metrics to evaluate configuration compliance.
• Prepare regular reports for management and stakeholders.
• Identify opportunities to improve security configuration processes.
• Drive initiatives to strengthen compliance and security measures.

Skills

Security analytics

Stakeholder comms

Independent worker

Detail oriented

Education

Bachelor's degree in Information Security or related field

Tools

Compliance tracking tools

Job description

State Street is seeking a driven Secure Configuration Management Compliance Analyst in Massachusetts. You will oversee configuration compliance, work with IT and security teams to remediate issues, and develop metrics to track progress.

The role emphasizes independent work, strong communication, and ongoing process improvements. The position focuses on monitoring IT configurations, ensuring adherence to CIS/NIST/ISO 27001 standards, and delivering clear reports to management.