Infrastructure Access Product Owner, Vice President

Overview

In this role you own the strategy, roadmap and delivery of Infrastructure Access capabilities within State Street’s cybersecurity program. You will shape the IA architecture, align with security and regulatory requirements, and drive improvements in privileged access controls and automation. You’ll work with cross-functional teams to implement tools like CyberArk and Vault, balancing strategic roadmaps with incremental compliance. This position combines hands-on design leadership with collaboration across the enterprise, in a hybrid work model.

Pay / Benefits

• hybrid work model
• flexible work-life support
• paid volunteer days
• vibrant employee networks
• inclusive development opportunities
• global recognition as an equal opportunity employer

Responsibilities

• Define and maintain the IA product vision, roadmap and backlog (vaulting, session management, just-in-time access)
• Align IA strategy with security objectives, regulatory requirements and zero trust principles
• Identify opportunities to improve privileged access controls, automation and user experience
• Develop a comprehensive IA architecture strategy aligned with objectives and regulatory requirements
• Construct roadmaps to reach the strategic state while enabling incremental compliance
• Communicate roadmap progress, priorities and trade-offs to stakeholders and leadership
• Lead design and contribute to deployment of IA solutions focusing on workload access controls and secrets management
• Implement and manage secrets management solutions for secure storage, access and rotation of privileged credentials
• Apply IA tools such as CyberArk, Hashi Vault and managing workload identities; use SailPoint for IGA in privileged accounts creation
• Collaborate with technology and business partners to identify and mitigate risks related to privileged access
• Stay current with trends in IA and cybersecurity and drive enhancements to existing solutions

Key requirements

• 10+ years in defining and delivering cybersecurity architecture, with experience in financial services or other regulated sectors
• Strong experience in architecting IA solutions across the enterprise
• Deep technical understanding of identity and access management controls and security technologies
• Familiarity with PCI DSS, HIPAA or GDPR regulatory requirements
• Expertise with build vs. buy solution options
• Working knowledge of cloud architectures and IAM with enterprise services, SSDLC, data protection, cryptography and key management

• leadership
• influencing skills
• exceptional communication and interpersonal skills
• CyberArk
• Microsoft Entra ID
• Secrets Management

…