Cyber Risk & Third-Party Security Analyst

Who We Are Looking For:

This opportunity is ideal for individuals interested in contributing to our team as a Security Analyst within State Street’s Global Technology Services organization. Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies.

The ideal candidate leads with integrity, embraces creativity, and invests in personal growth. This role requires a collaborative mindset, a passion for innovation, and the ability to inspire others.

What you will be responsible forIn this role, you will perform the following day-to-day activities:

Perform cyber due diligence assessments within State Street’s Third Party Cybersecurity Risk Management Program in alignment with current regulatory requirements and risk-based reviews including new engagements and ongoing monitoring of existing providers.

Review and ensure quality and timely responses in support of State Street’s global internal business units by providing accurate and in-depth due diligence risk assessments of third-parties holding data outside of State Street’s controls. The analyst is expected to evaluate how the third party supports and provides services to State Street and how their features affect State Street Security Assist with initial and recurring reviews of third-party Security Schedules;

provide guidance and support to legal, the business units and the vendors.

Continuously monitor and learn compliance efforts and how security assessments of various network components of the global infrastructure identify gaps to regulatory and compliance requirements relative to ISO 27001/27002, NIST 800-53, FFIEC, Cloud Security Alliance (CSA) and others that meet current regulatory environments globally.

Research, present and execute new and improved methodologies to ensure enhanced process further aligned with increasing volumes and demands.

Participate in the roundtable review process for global team members to present due diligence findings – ensuring a consistent and high-quality deliverable for third-party information security vendor risk assessments. Learn how the team members interact and review each other’s work.

What we value

These skills will help you succeed in this role Engagement in meaningful daily work:
You'll take ownership of specific tasks and projects, gaining hands-on experience and building confidence through real contributions.

A supportive learning environment:
You'll exercise your judgment in a guided setting, with mentorship and supervision to help you grow.

Focused skill development:
This role is designed to help you deepen your expertise in a specific area.

Clear structure and expectations:

You'll work with in well-defined parameters, giving you the clarity and focus to succeed.

Independent contributions:
You'll have the opportunity to make an impact through your individual contributions while collaborating with a supportive team.

Focus on growth:
While there are no people management responsibilities with this role, it is a great stepping stone for future leadership opportunities.

A collaborative team culture:
You'll build strong working relationships with your peers and supervisor, gaining valuable experience in a professional environment.

Education and

Preferred Qualifications:

Final-year undergraduate or graduate students pursuing degrees in Computer Science or Information Technology with specializations in Network Security, Cloud Security, Data Analytics, Incident Response, or related technical disciplines who are interested in converting to a full-time role post-graduation

Enthusiastic about building a long-term career in a dynamic, technology-driven organization

Effective communicators with the ability to collaborate in a team-oriented environment

Open to feedback and committed to continuous learning and improvement

Motivated by real-world problem solving and eager to contribute innovative ideas

Regulatory Compliance Management Cybersecurity Regulatory  Reporting…