Secure Configuration Management Compliance Lead - Assistant Vice President

Who we are looking for  

We are looking for a driven and experienced professional to serve as the Program Compliance Lead within the Secure Configuration Management (SCM) program. This role will lead enterprise efforts to monitor, report, and escalate configuration non-compliance across State Street’s technology footprint. The ideal candidate brings strong governance experience, technical understanding of configuration experience, technical understanding of configuration scanning, and the ability to drive accountability across multiple stakeholder groups.

Why this role is important to us 

As part of State Street’s broader technology risk and controls strategy, the SCM Program Compliance Lead plays a critical role in ensuring secure configuration standards are enforced consistently across platforms. The lead will own the compliance lifecycle – from identifying and tracking non-compliance to escalation and remediation follow-up – and provide oversight to ensure timely and risk aligned resolution of deviations. This work supports regulatory expectations, audit readiness, and overall posture improvement.

What you will be responsible for  

Compliance Oversight and Governance

• Track compliance with published configuration baselines across in-scope assets
• Monitor, report, and escalate non-compliance based on risk and criticality
• Define remediation timelines, exceptions criteria, and escalation protocols

Stakeholder Engagement and Remediation

• Partner with platform owners, infrastructure teams, and application managers to drive remediation
• Coordinate across decentralized teams to ensure alignment with program expectations
• Communicate clearly with stakeholders on compliance status, expectations, and timelines

Metrics and Reporting

• Develop and deliver compliance dashboards, KPIs, and executive-level reporting
• Provide transparency into trends, root causes, and progress toward risk reduction goals
• Support regulatory and audit inquiries by providing clear evidence of control enforcement

Process Development and Continuous Improvement

• Establish standard operating procedures (SOPs) for issue tracking, aging, and closure
• Identify process gaps and recommended improvements to compliance workflows
• Collaborate with scanning and data teams to enhance data quality and result fidelity

What we value

These skills will help you succeed in this role: 

• Deep understanding of configuration compliance and technology risk management
• Experience working with infrastructure teams and decentralized asset owners
• Familiarity with scanning tools (i.e. Qualys, and Chef InSpec) and asset inventories (ServiceNow CMDB)
• Strong stakeholder management and communication skills
• Ability to influence without direct authority and drive accountability across teams
• Expertise in establishing program governance frameworks and oversight mechanisms to ensure compliance with internal policies and external regulations
• Familiarity with security frameworks and standards, such as NIST, CIS, ISO 27001, and others 
• Knowledge of cloud services (e.g., AWS, Azure, GCP) and virtualization technologies (e.g., VMware, Hyper-V) 

Education & Preferred Qualifications  

• 8+ years of experience in cybersecurity, IT risk, or technology control roles
• Experience managing large-scale remediation efforts or compliance enforcement initiatives
• Bachelor’s degree in Cybersecurity, Information Systems, or related field
• Experience in financial services or regulated industries strongly preferred      
• Experience in business process analysis, design, and implementation
• Experience navigating a complex matrix of accountable stakeholders and global teams in multiple time zones

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement