Endpoint Security Product Lead, VP

About State Street At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion

State Street

Investment ManagementCustodianETFFinancial productsFund AccountingRelationship ManagementResearchTradingand Investment Servicing

S

statestreet.com

10,001+ employees

Financial Services

Boston, Massachusetts

1792

Public Company

897k LinkedIn followers

Raised $14.8B

• Proven experience leading and developing technical or cybersecurity teams.
• Strong experience with enterprise endpoint security technologies, controls,
• and architectures.
• Experience building effective partnerships and shared product models across
• Cyber Security and Technology organizations.
• Ability to align security requirements with platform engineering priorities
• and operational needs.
• Experience developing security product strategies, roadmaps, technical
• standards, and maturity plans.
• Strong understanding of endpoint threats and preventative controls across
• workstations, servers, browsers, and virtual environments.
• Experience with application control, browser security, endpoint hardening,
• attack surface reduction, and endpoint resilience.
• Knowledge of frameworks and practices such as NIST CSF, CIS Controls, CIS
• Benchmarks, MITRE ATT&CK, and Zero Trust.
• Experience defining meaningful metrics, measuring control effectiveness, and
• driving remediation of security gaps.
• Strong leadership, product management, communication, and
• stakeholder-management skills.

Required

• We are looking for a VP, Endpoint Product Security Lead reporting into the
• Defensive Engineering leadership team within Global Cyber Security (GCS). This
• role will lead the Endpoint Product Security team and define the strategy,
• roadmap, and maturity of enterprise endpoint security capabilities.
• The role will build a shared and embedded product model with GTS Endpoint
• Platform leaders, aligning Cyber Security requirements with GTS platform
• priorities to deliver shared security outcomes across the enterprise.
• The team you will be joining is part of Defensive Engineering within Global
• Cyber Security, a function that is critical to the company’s cybersecurity
• strategy. Endpoints remain a significant attack surface for unauthorized
• software, malicious content, credential theft, and other cyber threats.
• This role will lead the team responsible for advancing endpoint security
• maturity through proactive controls, strong product management, measurable
• outcomes, and close partnership with GTS.
• Lead, develop, and manage a team of endpoint product security professionals,
• setting clear priorities, expectations, and accountability.
• Define and drive the enterprise endpoint security strategy, product roadmap,
• and maturity plan.
• Build a shared product operating model with GTS Endpoint Platform leaders
• that aligns priorities, roadmaps, ownership, and success measures.
• Treat the GTS Endpoint Platform organization as a key customer and partner,
• ensuring security capabilities are practical, scalable, and embedded within
• endpoint platform services.
• Establish shared outcomes and metrics across GCS and GTS for endpoint
• security coverage, policy enforcement, control effectiveness, exceptions, and
• risk reduction.
• Drive the adoption and maturity of capabilities such as application control,
• browser security, endpoint hardening, attack surface reduction, and endpoint
• resilience.
• Establish endpoint security requirements, configuration standards, policy
• baselines, and secure-by-design practices.
• Assess control coverage and effectiveness, identify security gaps, and
• prioritize improvements based on threat, risk, and business impact.
• Lead security product evaluations, proof-of-concepts, vendor assessments, and
• platform lifecycle planning.
• Collaborate with the Cyber Defense Center to improve endpoint telemetry,
• visibility, investigation, and incident response capabilities.
• Partner with Infrastructure, Desktop Engineering, Server, Cloud, and other
• technology teams to embed security throughout the endpoint lifecycle.
• Maintain product documentation, control evidence, and supporting materials
• for risk, audit, and regulatory requirements.
• Serve as the product owner and senior subject matter expert for enterprise
• endpoint security capabilities.
• endpoint environments.
• Experience managing product roadmaps, vendor relationships, and security
• platform lifecycles.
• Ability to translate threats, control gaps, and regulatory requirements into
• actionable product priorities.
• Ability to influence and drive shared outcomes across GCS, GTS,
• Infrastructure, Cloud, Risk, and Engineering organizations.
• Strong focus on team development, collaboration, accountability, and
• continuous improvement.
• Hybrid work model in accordance with company policy.
• Ability to collaborate effectively with global teams across multiple time
• zones.
• Standard business hours with flexibility to support critical security
• incidents, deployments, and initiatives when required.

Preferred

• Bachelor’s degree in Computer Science, Information Security, Engineering, or
• a related field, or equivalent practical experience.
• 8+ years of experience in cybersecurity, endpoint security, security
• engineering, security architecture, or security product management.
• 3+ years of experience leading technical or cybersecurity teams.
• Experience implementing or maturing enterprise security platforms and
• controls at scale.
• Experience working in financial services or another highly regulated industry
• preferred.
• Relevant certifications such as CISSP, CCSP, GIAC, or equivalent preferred.

• The range quoted above applies to the role in the primary location specified. If
• the candidate would ultimately work outside of the primary location above, the
• applicable range could differ.
• Employees are eligible to participate in State Street’s comprehensive benefits
• program, which includes: our retirement savings plan (401K) with company match;
• insurance coverage including basic life, medical, dental, vision, long-term
• disability, and other optional additional coverages; paid-time off including
• vacation, sick leave, short term disability, and family care responsibilities;
• access to our Employee Assistance Program; incentive compensation including
• eligibility for annual performance-based awards (excluding certain sales roles
• subject to sales incentive plans); and, eligibility for certain tax advantaged
• savings plans.
• Across the globe, institutional investors rely on us to help them manage risk,
• respond to challenges, and drive performance and profitability. We keep our
• clients at the heart of everything we do, and smart, engaged employees are
• essential to our continued success.
• We are committed to fostering an environment where every employee feels valued
• and empowered to reach their full potential. As an essential partner in our
• shared success, you’ll benefit from inclusive development opportunities,
• flexible work-life support, paid volunteer days, and vibrant employee networks
• that keep you connected to what matters most. Join us in shaping the future.
• Discover more information on jobs at StateStreet.com/careers
• [http://statestreet.com/careers]
• It is unlawful in Massachusetts to require or administer a lie detector test as
• a condition of employment or continued employment. An employer who violates this
• law shall be subject to criminal penalties and civil liability.