Infrastructure Access Product Owner, Vice President in London

The Infrastructure Access (IA) Product Owner will be responsible for designing the IA architecture strategy for State Street Cybersecurity organization. The role will also require helping design the IA platform with all its tools. This role demands deep expertise in workload access controls, secrets management, and a good grasp of cloud architecture. The ideal candidate will possess extensive experience with Infrastructure access tools, including CyberArk, Microsoft Entra ID, and Secrets Management, ensuring the security and compliance of the organisation's IT infrastructure. Strong leadership and influencing skills are crucial to drive initiatives and collaborate effectively across the organisation.

The Product Owner for Infrastructure Access will be responsible for defining, owning, and driving the strategy, roadmap, and delivery of Infrastructure Access capabilities. This role can be performed in a hybrid model, where you can balance work from home and office to match your needs and role requirements.

What you will be responsible for:

• Define and maintain the product vision, roadmap, and backlog for Infrastructure Access Management solutions (e.g., vaulting, session management, just-in-time access).
• Align IA strategy with enterprise security objectives, regulatory requirements, and zero trust principles.
• Identify opportunities to improve privileged access controls, automation, and user experience.
• Develop a comprehensive IA architecture strategy that aligns with organisational objectives and regulatory requirements.
• Construct roadmaps to progress to the strategic state, while standardising some interim states to achieve compliance incrementally.
• Communicate roadmap progress, priorities, and trade-offs to stakeholders and leadership.
• Lead the design and contribute to the development and deployment of IA solutions, focusing on workload access controls and secrets management.
• Contribute to the implementation and management of secrets management solutions ensuring the secure storage, access, and rotation of privileged credentials.
• Apply IA tools such as CyberArk, HashiVault, and managing workload identities and federated identities. Use SailPoint for IGA in the creation of privileged accounts.
• Collaborate with technology and business partners to identify and mitigate risks associated with privileged access.
• Stay current with emerging trends and technologies in IA and cybersecurity and drive enhancements to existing solutions.

What we value:

• 10+ years of experience in defining and delivering cybersecurity architecture, strategies, and solutions with demonstrated experience in the financial services industry or other highly regulated sectors.
• Strong industry experience in architecting and designing IA solutions and deployment across the enterprise.
• Deep technical understanding of IA capabilities, controls, and security technologies in areas related to identity and access management to address privilege-based risk.
• Familiarity with regulatory requirements related to IA, such as PCI DSS, HIPAA, or GDPR.
• Expertise with build vs. buy solution options.
• Working knowledge and experience with Cloud Architectures and the ability to address the security considerations of secure cloud computing including IAM with enterprise services, SSDLC, data protection, cryptography, and key management.

Education & Preferred Qualifications:

• Degree in Cyber Security or Computer Science with a master's degree in computer science or equivalent degree.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) are highly desirable.

Additional requirements:

• Demonstrate leadership and consensus-building skills with which you influence decisions and engage all levels of the organisation.
• Exceptional communication and interpersonal skills, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don’t necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data-driven decisions, and are a good team player, you could be a great fit.

Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We’re driving the company’s digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence, and robotics process automation.

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, colour, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.