Security Engineer, Charles River Development, Assistant Vice President

at  State Street Corporation

SUMMARY:

Contribute to the enhancement and maintenance of Charles River Development’s security risk and governance team, namely Security GRC.

EDUCATION:

• B.S. degree (or foreign education equivalent) in Computer Science, Engineering, Electronics, Mathematics, or Physics or other technical course of study required.
• MS degree desirable.

EXPERIENCE:

• 10 - 15 years of professional
• Knowledge of Cloud technologies, preferably Azure
• Professional certifications, such as CISSP, CISM, CEH, SSCP, Lead Auditor
• Effective written and verbal communication skills
• Able to work well with peers in a collaborative team environment

Supervisory Responsibility:

• Individual Contributor Team Lead Manager of Managers

Technical

• Security Engineering: Lead out the engagements between Security and Audit, Risk, Compliance, and external regulators.
• Tooling and Automation: Oversee the evaluation, selection, and optimization of state-of-the-art security technologies to streamline SDLC compliance.
• Information Security: Work closing with State Street’s information security officers (ISOs) to ensure policy and procedures are followed, work to define standards, expectations, and processes.
• Security Architecture: Support the conceptualization, implementation, and enhancement of security controls and frameworks to mitigate risks.
• Research & Innovation: Spearhead research efforts into innovative ways to improve actitives and document these in systems like Archer, Confluence, Jira, etc.
• Vendor Management: Manage the lifecycle of the commercial relationships including contract negotiation, performance metrics, and ongoing engagement.
• Procedures and Standards: Assess where there are gaps in aligning with State Streets policies and procedures. Document these gaps, build controls and ensure all teams are maintaining compliance.
• Metrics and Reporting: Develop key performance indicators (KPIs) and dashboards to provide actionable insights into the security landscape.
• Process Improvement: Continuously assess and iterate on security workflows, ensuring scalability and efficiency.

Talent Growth:

• Strong partnership and soft skills to influence outside of the Security organization to drive business-impacting change
• Someone willing to continue to learn and grow as the Security industry continues to shift and threats change
• Champion a culture of secure technical innovation within the organization.