PAM Governance Analyst, VP

Global Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks against systems by understanding the risks these attacks present and mitigating them through a robust, continuously evolving, cybersecurity program and control environment.

Cyber Architecture & Engineering (Cyber A&E) is one of five functions that make up GCS. Cyber A&E designs, architects, deploys, and continually enhances security measures for the protection of State Street’s information related to its assets and customers.

The Infrastructure Access and Privileged Management (IAPM) Governance Vice President plays a critical role in establishing and maintaining the firm’s privileged access governance framework. This position provides enterprise‑wide oversight of privileged access controls, ensuring alignment with internal risk standards, regulatory expectations, and audit requirements.

The ideal candidate works closely with technology, security, risk, compliance, and audit partners to ensure privileged access is appropriately designed, governed, measured, and remediated across all platforms and environments. The role requires strong technical expertise in IAM and PAM solutions, strong critical thinking and problem solving skills and excellent communication skills.

Responsibilities:

Lead cross-departmental teams to design and implement manual and automated controls for all PAM policies.

Participate in the review and maintenance or privileged access policies and standards.

Oversee PAM‑related controls, metrics, and key risk indicators, including board‑level and regulatory reporting.

Develop, maintain, and execute IAM and PAM governance SOPs, ensuring processes are repeatable, defensible, and audit‑ready.

Serve as a point of contact for audit, risk, and regulatory inquiries related to privileged and elevated access.

Identify control gaps and emerging risks, drive remediation activities, and track issues to closure.

Provide expert advisory guidance on privileged access solutions, including firecall access, time‑bound access, and non‑persistent access models.

Provide privileged access expertise in the shift to AI driven compliance.

Required Qualifications:

Candidates must have a BS/BA degree in a technical discipline.

Candidates must have strong oral and written skills in English Candidates should have 12+ year of experience working within a cybersecurity related discipline

Candidates should have a strong familiarity with PAM tools and processes

Candidates should have strong skills with Microsoft Office tools such as Excel, MS Word and PowerPoint.

Candidates should be self-starters, showing initiative without waiting to be asked

Candidates should be detail oriented

Candidates should have critical thinking skills and be able to solve problems independently

Candidates should be able to work well within a team

Preferred Qualifications:

Candidates with the following knowledge areas, though not required, are preferred:

Operating Systems:
Windows, Unix, Linux Databases:
Oracle, Sybase and SQL Server Code and Scripting

Languages:

SQL, Power Shell, Linux shell scripting, Python and an understanding of operating systems Windows and Linux and accounts management on these systems are preferred.

Knowledge of AWS and Azure cloud security

Familiarity with Copilot or other AI tools

Location:

Quincy, MA USASalary Range:$120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans);

and, eligibility for certain tax…