State Street-posted 3 days ago
$170,000 - $282,500/Yr
Full-time • Manager
Quincy, MA
5,001-10,000 employees

State Street’s Global Cyber Security organization is seeking an experienced technical manager to lead a team focused on regulatory penetration testing. The Managing Director of Regulatory Penetration Testing will be responsible for coordination and management of the full lifecycle of regulatory penetration testing activities, from initial notification through test design and implementation, as well as follow-on support to stakeholders across the enterprise. The ideal candidate will leverage a deep background in offensive security, threat modeling, and security assurance methodologies to help enhance the firm’s resilience against an evolving cyber threat landscape.

  • In coordination with senior Global Cyber Security leaders, develop and implement a global strategy for all security testing
  • Serve as the primary subject matter expert in global threat-led penetration testing activities, identifying unique requirements across jurisdictions and ensuring successful execution of testing activities
  • Lead engagement with internal stakeholders to understand the outputs of threat-led penetration tests within the context of the larger control environment
  • Maintain a global view of testing coverage, risk trends, and program maturity, providing strategic recommendations for improvement
  • Manage a team of internal and external subject matter experts and project managers across test design, execution, and follow on testing support to control owners
  • Lead testing lifecycle design, including overall scope definition, rules of engagement, and reporting
  • Work closely with control owners and business units to understand the results of threat-led penetration testing activities
  • Coordinate with Global Cyber Security and lines of defense peers to analyze test results in the context of the global threat landscape and controls environment
  • Strong leadership and situational decision-making
  • High attention to detail and analytical rigor
  • Ability to inform and influence in a global environment
  • Pragmatic problem-solving with a risk-based mindset
  • Commitment to high ethical standards
  • 10+ years of prior experience within cybersecurity disciplines, including but not limited to penetration testing, exploit development, threat modeling and controls design, cyber threat intelligence, threat hunting and incident response
  • Prior cybersecurity experience within the financial services sector
  • Prior experience working with security standards and frameworks
  • Relevant industry certifications such as OSCP, OSCE, GPEN, and GWAPT
  • Occasional travel
  • Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service