Data & AI Governance and Risk, SVP

State Street•Boston, MA

About The Position

The Head of Data & AI Governance and Risk is accountable for ensuring that all enterprise Data, AI, and Agentic AI capabilities are well-governed, high-quality, trusted, and regulator-ready, while enabling innovation to scale safely across all lines of business. This role defines and maintains the enterprise policies, standards, and governance operating model for Data and AI and serves as the single global point of accountability for Data and AI-related regulatory, audit, and supervisory engagement. The role operates proactively, anticipating regulatory direction and strengthening the firm’s posture ahead of examinations. It actively engages in all ongoing regulatory efforts related to data, risk, and AI, partnering with appropriate bank owners to ensure coordinated execution and durable remediation. In partnership with each line of business, this role defines the strategic target state for Data and AI governance, ensuring clarity and consistency across ownership, stewardship, authoritative sourcing, data quality, and approval expectations. The role is intentionally independent of platform build, model development, and use-case delivery. Success is measured by regulatory confidence, enterprise trust, data quality, and speed enabled through strong governance and streamlined processes.

Requirements

Accountable for ensuring that all enterprise Data, AI, and Agentic AI capabilities are well-governed, high-quality, trusted, and regulator-ready.
Defines and maintains the enterprise policies, standards, and governance operating model for Data and AI.
Serves as the single global point of accountability for Data and AI-related regulatory, audit, and supervisory engagement.
Operates proactively, anticipating regulatory direction and strengthening the firm’s posture ahead of examinations.
Actively engages in all ongoing regulatory efforts related to data, risk, and AI, partnering with appropriate bank owners to ensure coordinated execution and durable remediation.
Defines the strategic target state for Data and AI governance, ensuring clarity and consistency across ownership, stewardship, authoritative sourcing, data quality, and approval expectations.
Intentionally independent of platform build, model development, and use-case delivery.
Success is measured by regulatory confidence, enterprise trust, data quality, and speed enabled through strong governance and streamlined processes.
Establish and operate enterprise-wide governance, risk, and regulatory oversight for Data, AI, and Agentic AI—including authoritative data sourcing—and proactively elevate the firm’s regulatory posture while enabling streamlined, standard approval of AI capabilities across the enterprise.

Nice To Haves

Partner with Data Architecture to align governance intent with target architectures
Partner with Data & AI Platforms to embed controls, approvals, and authoritative sourcing
Partner with Enablement teams to operationalize compliant pathways
Partner with Business leaders to adopt governance consistently
Maintain independence from delivery while actively shaping enterprise design decisions
Continuously evolve governance practices to match regulatory and technology change

Responsibilities

Define, maintain, and evolve enterprise-wide policies, standards, and control frameworks for Data governance and data management, AI, GenAI, and Agentic AI, Responsible AI and AI risk classification, and Third-party and vendor AI usage.
Ensure governance applies across the full lifecycle of data and AI assets, from design through retirement.
Partner with each line of business to define and maintain the target state for Data and AI governance aligned to enterprise standards and regulatory expectations.
Translate enterprise governance principles into domain-specific, actionable models.
Provide governance leadership into Data & AI roadmaps without owning delivery or architecture decisions.
Establish and operate the enterprise framework for authoritative data sources by data domain and key data element.
Partner with data owners and data stewards to designate approved and trusted data sources, resolve conflicts between competing sources, ensure lineage, data quality, and fitness for purpose, and ensure consistent use of authoritative data sources across analytics, reporting, and AI use cases.
Institutionalize the enterprise data governance operating model, including data ownership and accountability, data steward roles and responsibilities, and management of key data elements and critical data assets.
Embed data accountability into business processes across all lines of business.
Own the enterprise inventory of AI initiatives across AI, GenAI, ML, and Agentic AI.
Ensure inventories, classifications, and definitions align with NIST AI Risk Management Framework and applicable regulatory expectations.
Design and operate streamlined, tiered approval processes for all AI types, ensuring consistent intake and classification, clear routing to required partners, and predictable and efficient approval timelines.
Monitor adherence to approval processes and continuously improve them to reduce friction and late-stage escalation.
Partner closely with the Model Risk Management (MRM) function.
Ensure AI and ML use cases are appropriately classified and routed to MRM where required.
Align governance standards and approval workflows with MRM requirements without duplicating or owning MRM accountabilities.
Define enterprise standards for data quality measurement, monitoring, and control.
Own enterprise processes for data issues and incidents, including root cause analysis, remediation tracking, and escalation.
Partner with business and platform teams to embed preventive and detective quality controls.
Act as the single enterprise point of contact for regulators, audit, and external inquiries related to Data and AI.
Proactively assess emerging regulatory expectations and drive early alignment across the firm.
Coordinate and participate in all active regulatory efforts relating to data, technology, and AI, working with appropriate bank owners.
Lead regulatory examinations, findings, and remediation programs (e.g., BCBS 239, MRAs).
Ensure regulatory learnings are converted into durable governance and process improvements.
Partner with Data Architecture to align governance intent with target architectures.
Partner with Data & AI Platforms to embed controls, approvals, and authoritative sourcing.
Partner with Enablement teams to operationalize compliant pathways.
Partner with Business leaders to adopt governance consistently.
Maintain independence from delivery while actively shaping enterprise design decisions.
Continuously evolve governance practices to match regulatory and technology change.

Benefits

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks