We are looking for an experienced Defensive Engineering Product Ops Specialist reporting to the Head of Defensive Engineering.

You will lead product operations across the Defensive Engineering portfolio, helping translate security strategy and priorities into structured roadmaps, product backlogs, measurable outcomes, and effective governance.

You will partner with security product managers, security engineers, GTS product owners, vendors, GRC teams, and other stakeholders to improve delivery discipline, maintain product and vendor governance, manage cross-team dependencies, and provide leadership with clear visibility into progress, risks, and security outcomes.

The team you will be joining is part of Global Cyber Security Defensive Engineering, a function that helps protect the firm, its clients, and critical business services through preventative security capabilities across areas such as email, endpoint, network, perimeter, SaaS, identity, application, and emerging technology security.

Defensive Engineering manages a portfolio of security products and initiatives that require close coordination across Security, GTS, application teams, infrastructure teams, vendors, and governance functions. This role will establish consistent product practices across the portfolio and ensure that roadmaps, delivery commitments, product metrics, vendor obligations, risks, and control requirements are effectively managed.

As a Defensive Engineering Product Ops Specialist, you will:

• Lead product operations across Defensive Engineering, establishing consistent practices for product intake, prioritization, roadmaps, backlogs, delivery tracking, governance, and reporting.
• Partner with product managers and security engineers to translate product strategies and security priorities into actionable plans, milestones, success measures, and delivery commitments.
• Facilitate quarterly planning, backlog refinement, sprint planning, product reviews, retrospectives, and portfolio governance meetings.
• Maintain an integrated view of product roadmaps, milestones, risks, dependencies, decisions, resource needs, and delivery status across the Defensive Engineering portfolio.
• Develop and maintain executive dashboards, scorecards, KPIs, and KRIs covering product delivery, adoption, control coverage, operational readiness, remediation progress, vendor performance, and risk reduction.
• Identify cross-product dependencies, delivery risks, control gaps, and unresolved decisions, and coordinate with accountable stakeholders to drive timely resolution or escalation.
• Coordinate product transitions from implementation into business-as-usual operations, ensuring ownership, support models, procedures, metrics, and operational readiness requirements are documented.
• Maintain product and operating model documentation, including product charters, roadmaps, RACIs, service definitions, procedures, meeting materials, decision logs, and governance records.
• Coordinate vendor governance across Defensive Engineering products, including onboarding, product reviews, roadmap discussions, service performance, renewals, risks, findings, and remediation commitments.
• Support TPRM activities by coordinating engagement records, inherent risk questionnaires, due diligence requests, vendor responses, governance evidence, performance metrics, remediation plans, and required documentation.
• Maintain required vendor performance and governance evidence, including SLAs, KPIs, KRIs, service review materials, operational issues, product roadmap updates, and supporting artifacts for submission in Archer.
• Coordinate ISRMP activities across Defensive Engineering products, working with product managers, engineers, vendors, Information Security Officers, and control owners to obtain accurate responses, supporting evidence, and timely reviews.
• Support the creation, maintenance, and tracking of Archer findings, risk acceptances, remediation plans, target dates, control evidence, and closure documentation.
• Partner with GRC, audit, risk, and regulatory stakeholders to coordinate evidence requests and maintain traceability between security requirements, product controls, identified gaps, remediation actions, and closure artifacts.
• Drive continuous improvement across product operations by simplifying processes, improving reporting quality, strengthening governance, and identifying opportunities for workflow and reporting automation.

These skills will help you succeed in this role:

• Demonstrated ability to coordinate cross functional & complex initiatives across cyber security teams, platform engineering, risk, vendor, and executive stakeholder groups in large enterprise. Strong experience supporting cybersecurity products through portfolio management, delivery oversight, vendor governance, TPRM and ISRMP coordination, Archer documentation, risk tracking, and control assurance.
• Strong knowledge of Agile delivery, product roadmaps, metrics, governance, risk management, and executive reporting.
• Experience supporting vendor governance, third-party risk management, audit, regulatory, control assurance, or remediation activities.
• Strong analytical, communication, problem-solving, and influencing skills, with the ability to bring structure and accountability to complex work.

• Bachelors degree in Business, Technology, Information Systems, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
• Eight or more years of experience in product operations, product management, program management, technology delivery, cybersecurity, risk management, or a related discipline.
• Experience supporting enterprise-scale products or programs across multiple teams, stakeholders, vendors, and locations.
• Experience developing executive dashboards, product scorecards, KPIs, KRIs, roadmaps, and portfolio reporting.
• Familiarity with cybersecurity products, security controls, third-party risk management, ISRMP, Archer, GRC, audit, or regulatory processes.
• Experience with Agile delivery, backlog management, collaboration, reporting, and dashboard tools.
• Agile, Scrum, Product Management, PMP, cybersecurity, risk management, or related certifications are preferred.

• Ability to operate independently and manage multiple product and governance workstreams.
• Strong attention to detail, judgment, and follow-through.
• Ability to influence stakeholders and drive progress without direct authority.
• Excellent written and verbal communication skills.
• Ability to prepare clear executive materials and present product status, risks, dependencies, and recommendations to leadership.
• Ability to work effectively across technical and non-technical teams in a complex, global, and regulated environment.

• Hybrid work model in accordance with company policy.
• Standard business hours with flexibility to support global teams and stakeholders across multiple time zones as needed.

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Streets comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.