IT Security, SrAssc

GCS Security Administrator

We are looking for a detail-oriented and technically capable GCS Security Administrator to support access administration, identity lifecycle management, and security request fulfillment across Global Cybersecurity services. The role requires strong operational discipline, customer service focus, and the ability to process access requests accurately while maintaining compliance with internal controls, approval requirements, and information security standards.

The ideal candidate will have experience administering user access requests through request management channels; validating approvals and user eligibility; documenting actions taken; and partnering with application owners, IAM teams, and business stakeholders to resolve access-related issues. Knowledge of Power Shell, scripting, and automation concepts is required to help streamline recurring tasks, support reporting, and improve operational efficiency.

As a GCS Information Security Administrator, you will be responsible for supporting secure and timely fulfillment of access requests, ensuring requests are properly authorized, accurately completed, and appropriately documented.

• Process user access add, modify, and delete requests for supported applications and platforms in accordance with established procedures, service levels, and control requirements.
• Administer access changes for applications and security groups, including creation, modification, removal, and validation of user IDs, entitlements, and role-based access assignments.
• Support access provisioning activities for applications that are not fully automated or onboarded to enterprise access management platforms.
• Maintain accurate documentation of request actions, approvals, work notes, evidence, and resolution details to support audit readiness and operational transparency.
• Monitor assigned queues, mailboxes, and work items to ensure requests are completed within agreed service levels and escalated when additional information or approvals are required.
• Partner with application owners, IAM teams, business approvers, technology teams, and requestors to resolve access issues and clarify request requirements.
• Assist with access reviews, entitlement clean-up, orphaned account remediation, and other control-related activities supporting identity and access management objectives.
• Use Power Shell and scripting knowledge to support data validation, reporting, automation of repeatable tasks, and operational process improvements.
• Identify opportunities to reduce manual effort, improve request accuracy, and strengthen controls through automation, documentation, and process standardization.
• Follow information classification, access management, cybersecurity, and request management standards when handling confidential or restricted information.

These skills and behaviors will help you succeed in this role:

• Strong understanding of identity and access management concepts, including least privilege, segregation of duties, role-based access control, and access lifecycle processes.
• Working knowledge of Power Shell and scripting concepts, with the ability to create, interpret, or modify scripts that support access administration, reporting, and automation.
• Ability to analyze access request details, identify missing or inconsistent information, and take appropriate follow-up action.
• Strong attention to detail and commitment to accurate documentation, evidence retention, and audit-ready processing.
• Ability to manage multiple request queues and priorities in a deadline-driven operational environment.
• Strong written and verbal communication skills, including the ability to explain access requirements and request outcomes clearly to technical and non-technical stakeholders.
• Sound judgment when handling confidential information, privileged access, and security-sensitive requests.
• Collaborative mindset with the ability to work effectively across Global Cybersecurity, IAM, application support, business operations, and technology teams.
• Continuous improvement mindset with interest in automation, process simplification, and control enhancement.

Experience in security administration, identity and access management, application support, service desk operations, or technology risk/control functions.

Experience processing access requests, validating approvals, and maintaining request documentation in an enterprise environment.

Familiarity with IAM platforms, ticketing systems, application entitlement models, Active Directory, and access certification processes.

Power Shell or scripting experience strongly preferred; familiarity with Python, JavaScript, batch scripting, or automation tools is a plus.

Global Cybersecurity plays a critical role in protecting State Street's information, systems, clients, and employees. The GCS Security Administrator helps ensure access is granted only to authorized users, removed when no longer required, and managed in alignment with internal controls and regulatory expectations. This role…