About the role

Infrastructure Access Product Owner defining strategy and managing roadmap for cybersecurity solutions at State Street. Leading efforts in workload access controls and secrets management across the organization.

Responsibilities

Define and maintain the product vision, roadmap, and backlog for Infrastructure Access Management solutions (e.g., vaulting, session management, just-in-time access).
Align IA strategy with enterprise security objectives, regulatory requirements, and zero trust principles.
Identify opportunities to improve privileged access controls, automation, and user experience.
Develop a comprehensive IA architecture strategy that aligns with organizational objectives and regulatory requirements.
Construct roadmaps to progress to the strategic state, while standardizing some interim states to achieve compliance incrementally.
Communicate roadmap progress, priorities, and trade-offs to stakeholders and leadership.
Lead the design contribute to the development and deployment of IA solutions, focusing on workload access controls and secrets management.
Contribute to the implementation and management of secrets management solutions ensuring the secure storage, access and rotation of privileged credentials.
Apply IA tools such as CyberArk, Hashi vault and managing workload identifies and federated identities.
Use Sailpoint for IGA in creation of privileged accounts.
Collaborate with technology and business partners to identify and mitigate risks associated with privileged access.
Stay current with emerging trends and technologies in IA and cybersecurity and driving enhancements to existing solutions.

10+ years of experience in defining and delivering cybersecurity architecture, strategies and solutions with demonstrated experience in the financial services industry or other highly regulated sectors.
Strong industry experience in architecting and designing IA solutions and deployment across the enterprise.
Deep technical understanding of IA capabilities, controls and security technologies in areas related to identity and access management to address privilege-based risk.
Familiarity with regulatory requirements related to IA, such as PCI DSS, HIPAA, or GDPR.
Expertise with build vs. buy solution options.
Working knowledge and experience with Cloud Architectures and the ability to address the security considerations of secure cloud computing including IAM with enterprise services, SSDLC, data protection, cryptography and key management.
Degree in Cyber Security or Computer Science with a master's degree in computer science or equivalent degree.
Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) are highly desirable.