Principal Product Manager, Defensive Engineering Programs & Controls

State Street

Confirmed live 2 days ago High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Boston, MAPrinceton, NJClifton, NJAustin, TX
Salary
$120,000–$202,500 / yr
Posted
40 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $204k
This role $161k
$105k most similar roles pay here $261k

This role pays less than 82% of similar roles. Most pay $176,812–$231,725 — the shaded band above. At the midpoint, this role pays about $161k versus about $204k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Principal Product Manager, Defensive Engineering Programs & Controls

The Principal Product Manager – Defensive Engineering Programs & Controls joins the Defensive Engineering team within Global Cyber Security to modernize the security engineering control landscape. This role functions as a bridge between security engineering, risk, compliance, and audit teams to ensure controls are measurable and aligned with regulatory requirements. You will lead strategic initiatives across multiple cybersecurity domains, defining control objectives, success criteria, and KPIs while translating complex regulatory requirements into technical roadmaps and executable programs. The ideal candidate possesses expertise in security control frameworks like NIST, CIS Controls, or ISO 27001, along with skills in risk management, governance, and executive communication. You will manage cross-functional programs to improve security capabilities for workforce protection and data safety, utilizing a deep understanding of cybersecurity operations and enterprise security controls within highly regulated environments.

What does a Product Manager earn?

Median $204200 from 424 postings across 77 companies.

See salary data

What you'll do

  • Lead strategic initiatives to modernize and mature the security engineering control landscape across multiple cybersecurity domains.
  • Define control objectives, success criteria, KPIs, and metrics to measure effectiveness and risk reduction.
  • Translate regulatory, audit, and risk requirements into technical roadmaps and executable engineering programs.
  • Drive complex cross-functional programs from initial strategy through execution and delivery.
  • Provide executive-level reporting and governance for security engineering initiatives.
  • Partner with engineering, risk, compliance, and legal teams to drive control implementation and remediation.
  • Develop governance frameworks, control libraries, and key risk indicators (KRIs).

What we're looking for

  • Bachelor's degree in Computer Science, Information Security, Engineering, Business, or a related field.
  • 10+ years of experience in cybersecurity, product management, program management, risk management, or governance functions.
  • Experience leading large-scale cybersecurity, risk, compliance, or security transformation programs.
  • Proficiency in translating regulatory and audit requirements into technical roadmaps and executable engineering programs.
  • Strong understanding of security control frameworks such as NIST, CIS Controls, ISO 27001, or similar.
  • Ability to develop governance frameworks, control libraries, KPIs, KRIs, and executive reporting.
  • Preferred certifications include CISSP, CISM, CRISC, PMP, or equivalent.
  • Experience in financial services or other highly regulated industries is preferred.

More like this

Similar roles

Cyber Policy Enforcement Lead, VP

State Street

Quincy, MA 30 days ago $120,000$202,500
GRC NIST ISO 27001 COBIT Cybersecurity Governance Risk Management Policy Management Control Monitoring Compliance Audit CISSP CISM CRISC CGEIT CISA Reporting KPIs Automation
10+ yrs exp

Principal Product Security Program Leader

Amd

San Jose, CA 25 days ago $240,000$360,000
Product Security PSIRT Secure Development Lifecycle (SDL) SAST Coverity CodeQL SCA SBOM Black Duck SPDX CycloneDX Threat Modeling ISO/SAE 21434 NIST SSDF FPGA Vivado Vitis PetaLinux Yocto Xen ISO/IEC 27001 CVSS CVE
Hybrid

Senior Principal Technical Product Manager

Oracle

Santa Clara, CA +1 50 days ago $126,200$264,100
Oracle Cloud Infrastructure AWS Azure Cloud Platform IaaS PaaS SaaS Distributed Systems Agile Product Management Cloud Computing Compute Storage Identity Networking
10+ yrs exp

Principal Product Manager

Microsoft

Redmond, WA 113 days ago $165,600$296,400
PKI Cryptography Public Key Infrastructure Security Engineering Identity Infrastructure Certificate Transparency Post-Quantum Cryptography Audit Frameworks Technical Documentation Incident Response
10+ yrs exp