Regulatory Penetration Testing Lead, Managing Director

State Street•Princeton, NJ

17d•$170,000 - $282,500

About The Position

State Street’s Global Cyber Security organization is seeking an experienced technical manager to lead a team focused on regulatory penetration testing. The Managing Director of Regulatory Penetration Testing will be responsible for coordination and management of the full lifecycle of regulatory penetration testing activities, from initial notification through test design and implementation, as well as follow-on support to stakeholders across the enterprise. The ideal candidate will leverage a deep background in offensive security, threat modeling, and security assurance methodologies to help enhance the firm’s resilience against an evolving cyber threat landscape.

Requirements

Strong leadership and situational decision-making
High attention to detail and analytical rigor
Ability to inform and influence in a global environment
Pragmatic problem-solving with a risk-based mindset
Commitment to high ethical standards
10+ years of prior experience within cybersecurity disciplines, including but not limited to penetration testing, exploit development, threat modeling and controls design, cyber threat intelligence, threat hunting and incident response
Prior cybersecurity experience within the financial services sector
Prior experience working with security standards and frameworks
Occasional travel

Nice To Haves

Relevant industry certifications such as OSCP, OSCE, GPEN, and GWAPT

Responsibilities

In coordination with senior Global Cyber Security leaders, develop and implement a global strategy for all security testing
Serve as the primary subject matter expert in global threat-led penetration testing activities, identifying unique requirements across jurisdictions and ensuring successful execution of testing activities
Lead engagement with internal stakeholders to understand the outputs of threat-led penetration tests within the context of the larger control environment
Maintain a global view of testing coverage, risk trends, and program maturity, providing strategic recommendations for improvement
Manage a team of internal and external subject matter experts and project managers across test design, execution, and follow on testing support to control owners
Lead testing lifecycle design, including overall scope definition, rules of engagement, and reporting
Work closely with control owners and business units to understand the results of threat-led penetration testing activities
Coordinate with Global Cyber Security and lines of defense peers to analyze test results in the context of the global threat landscape and controls environment

Benefits

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
For a full overview, visit https://hrportal.ehr.com/statestreet/Home.
As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume