Cybersecurity Technical Project Analyst

State Street Corporation • Quincy, MA

289d • $100,000 - $160,000

About The Position

State Street seeks to recruit an outstanding Cybersecurity Technical Project Analyst with an excellent understanding of cybersecurity frameworks (NIST CSF and NIST 800-53) and hands-on experience with the rigor required to achieve compliance with them. Experience with one or more of the following frameworks is highly preferred - Texas-RAMP, State RAMP or FedRAMP.

Requirements

• Bachelor's degree in IT or Cybersecurity.
• Five to ten years of experience working in technology risk management, information security/cybersecurity or related field.
• Five to seven years of technical project management experience.
• Two plus years RAMP experience.
• Consulting experience will be a big plus.
• A solid understanding of and interest in Information Technology and Cybersecurity concepts.
• Strong understanding of Cloud and related technologies.
• Experience and background in one of the following areas will be valuable - Risks and Controls, Cyber Controls Assurance, or Controls Testing and Validation.
• Excellent verbal and written skills.

Nice To Haves

• Strong teamworking, excellent communication skills, critical thinking and problem solving.
• Ability to work collaboratively across a matrixed, global organization to deliver project deliverables.
• Self-starter capable of working independently and in team settings.
• Ability to influence others outside of your own department.
• Strong understanding and hands-on experience working with Agile and Scrum methodologies.

Responsibilities

• Part of the team leading the Certification efforts for Texas-RAMP and State Ramp.
• Drive program outcomes by ensuring each program meets its intended deliverables within expected timelines.
• Establish processes and procedures required to meet the Texas-RAMP and State RAMP administrative requirements.
• Provide security control expertise to guide implementation and assessment readiness.
• Review documentation and evidence, evaluation of procedures, preparing teams for audit interviews with third-party organizations such as 3PAO (Third-Party Assessment Organization).
• Managing policy exceptions, including working directly with teams to document exceptions, identifying compensating controls and remediation action plans.
• Lead development and continuous updates to the System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Actions & Milestones (POAMs) to support the RAMP Program.
• Break down programs into component parts, identifying and tracking dependencies and opportunities for optimization; proactively identify problems and recommend solutions before they become blockers.
• Escalate project issues to management in a timely manner to inform and engage the necessary resources to address the issue.
• Create thorough and accurate reports and provide status updates on projects.
• Deep familiarity working with a Third-Party Assessment Organization (3PAO) with regards to engagement formalities, types of evaluations done, and documentation that will be reviewed, to obtain required Texas-RAMP and State RAMP certifications.

Benefits

• Generous medical care, insurance and savings plans.
• Flexible Work Programs.
• Development programs and educational support.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree