Principal Product Manager – Defensive Engineering Programs, Controls

State Street

Principal Product Manager leading cybersecurity control modernization initiatives. Collaborating with cross-functional teams in the financial services sector to improve security measures and compliance.

Posted 8/2/2026full-timeBoston • Massachusetts, New Jersey, Texas • 🇺🇸 United StatesLead💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading cybersecurity initiatives, defining control objectives, and translating regulatory requirements into actionable engineering programs. Proficient in program management and stakeholder engagement to drive security transformation and risk management.

Highest-signal resume keywords

Cybersecurity LeadershipProgram ManagementRisk ManagementSecurity Control FrameworksExecutive Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ControlsGovernance FrameworksRegulatory RequirementsRisk Management PracticesControl Effectiveness MetricsKPI DefinitionTechnical RoadmapsControl ImplementationRemediation StrategiesCross-Functional Program Execution

Soft Skills

Stakeholder ManagementDecision-MakingExecutive-Level ReportingContinuous ImprovementCollaboration

Certifications & Qualifications

CISSPCISMCRISCPMP

Industry Keywords

CybersecurityRisk ManagementComplianceSecurity TransformationNISTCIS ControlsISO 27001

Tech Stack

Tools & technologies

Cyber SecurityPMP

About the role

Key responsibilities & impact

Lead strategic initiatives to modernize and mature the security engineering control landscape across multiple cybersecurity domains
Define control objectives, success criteria, KPIs, and metrics that measure control effectiveness, coverage, and risk reduction
Partner with engineering, risk, compliance, legal, and audit teams to drive control implementation, remediation, and continuous improvement
Translate regulatory, audit, and risk requirements into technical roadmaps and executable engineering programs
Drive complex cross-functional programs from strategy through execution while providing executive-level reporting and governance

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Engineering, Business, or a related field
10+ years of experience in cybersecurity, product management, program management, risk management, or governance functions
Experience leading large-scale cybersecurity, risk, compliance, or security transformation programs
Strong understanding of security controls, governance frameworks, regulatory requirements, and risk management practices
Ability to bridge technical engineering teams with risk, compliance, and audit stakeholders
Strong program management, executive communication, stakeholder management, and decision-making skills
Certifications such as CISSP, CISM, CRISC, PMP, or equivalent preferred
Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar

Benefits

Comp & perks

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans