IT Security, Officer

What You Will Be Responsible For

As a GCS Information Security Officer, you will support the secure and timely fulfillment of access requests by ensuring each request is properly authorized, accurately completed, and appropriately documented.

• Process user access requests for additions, modifications and removals according to procedures, service levels and controls.
• Administer and verify user IDs, entitlements, roles, and security group memberships.
• Provision access to applications not fully automated or integrated with enterprise platforms.
• Maintain audit-ready records of approvals, actions, evidence, and resolutions.
• Monitor work queues and escalate requests that lack required information or approvals.
• Work with stakeholders to clarify requirements and resolve access issues.
• Support access reviews, entitlement cleanup, orphaned account remediation, and identity and access management controls.
• Use PowerShell and other scripting tools to validate data, generate reports, automate tasks, and improve operations.
• Follow security and data-handling standards for confidential or restricted information.

What We Value

These skills will help you succeed in this role:

• Strong understanding of identity and access management concepts, including least privilege, segregation of duties, role-based access control, and access lifecycle processes.
• Ability to analyze access request details, identify missing or inconsistent information, and take appropriate follow-up action.
• Strong attention to detail and commitment to accurate documentation, evidence retention, and audit-ready processing.
• Working knowledge of PowerShell and scripting concepts, with the ability to create, interpret, or modify scripts that support access administration, reporting, and automation.
• Ability to manage multiple request queues and priorities in a deadline-driven operational environment.
• Strong written and verbal communication skills, including the ability to explain access requirements and request outcomes clearly to technical and non-technical stakeholders.
• Sound judgment when handling confidential information, privileged access, and security-sensitive requests.
• Collaborative mindset with the ability to work effectively across Global Cybersecurity, IAM, application support, business operations, and technology teams.
• Continuous improvement mindset with interest in automation, process simplification, and control enhancement.

Education & Preferred Qualifications

Degree required: [N/A]

Years of experience: [N/A]

Certifications required or preferred: [N/A]

Knowledge of tools or technologies:

• Experience in security administration, identity and access management, application support, service desk operations, or technology risk/control functions.
• Familiarity with IAM platforms, ticketing systems, application entitlement models and access certification processes.
• 3-5 years hands-on experience administering RACF within an IBM z/OS environment.

Additional language requirements:

PowerShell or scripting experience strongly preferred; familiarity with Python, JavaScript, batch scripting, or automation tools is a plus.

Additional requirements for this role include:

• Three or more years of experience in security administration, identity and access management, user provisioning, technology operations or a comparable control-focused function.
• Working knowledge of identity lifecycle management, access provisioning and deprovisioning, privileged access, role-based access control, segregation of duties and access certification.
• Experience using identity governance, service-management, or access request platform such as SailPoint, ServiceNow or an equivalent solution.
• Excellent problem-solving abilities and clear communication skills to work across technical and business departments.
• Availability for shift coverage and on-call support.

Hybrid Work Requirement: [N/A]

Shift Timings: [N/A]

Salary Range:

$70,000 - $115,000 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.