Head of Technology Risk Oversight, Managing Director

State Street•Stamford, CT

47d

About The Position

Who we are looking for It is an exciting time to join State Street Corporation (SSC) in the Enterprise Technology Risk Management (ETRM) organization. ETRM is responsible for thought leadership, oversight, monitoring, and advisement around the discovery and remediation of Technology Risk and Cyber Risks across the enterprise. We are looking for an seasoned Technology Risk Leader with more than 15 years’ experience in financial services and/or technology industry. The qualified candidate should be well versed in identifying, managing and monitoring technology risks across Technology Resiliency, Technology Change Management, Obsolescence, IT Asset Management and Technology Risks related to Third parties. The position interacts with all levels of management and senior level executives in IT viz. CTO, CIO, Chief Architect etc. Therefore, exceptional interpersonal and communication skills are required. Candidates must demonstrate strong initiative, be able to perform well under pressure and be capable of managing multiple and diverse assignments. The successful candidate will report in to the Global Head of Technology and Cyber Risk, who reports directly into the Chief Risk Officer and lead a team of seasoned ETRM Technology Risk professionals to provide Second Line of Defense (SLoD) services to Global Technology Services First Line Organization. This role will require periodic communications with internal audit and regulators in the financial services domain and therefore, prior experience with regulators is strongly desired. Experience with Cyber and Information Security, Cloud Risk Management (AWS, Azure), Enterprise Architecture is a plus. Why this role is important to us ETRM plays an important role in the overall success of the organization and our mission is to establish a world class Technology Risk Management program that aligns business and technology risk to enable effective decision making. The organization is going through large transformations and you will lead key technology risk assessments on material projects and ensure the identified risks are being prudently managed. This position will also include providing thought leadership and support to both your peers in ETRM and your stakeholders in the business and corporate areas. You will need to periodically participate in meetings with our key regulators and provide support and advise to your stakeholders during regulatory exams and regulatory finding validations. What you will be responsible for Your mission is to act as the ETRM advisor to the IT organization and first line of defense (FLOD) control function on matters relating to the IT risk posture of State Street as benchmarked against applicable laws and regulations, rules, standards and best practices.

Requirements

Minimum 15 years of experience in the financial, and or technology industries
This position requires interacting with “C” level suite, so superior communication, interpersonal, negotiation, presentation and intergroup skills are critical for success
Ability to translate technical issues into risk terms that business can understand is absolutely necessary
Experience with regulatory exams and responses is strongly desired
Advanced degree or undergraduate in technology disciple or equivalent
Experience in risk management, compliance or audit, including but not limited to experience in design & implementation of control frameworks
Working knowledge of industry and regulatory risk and control standards and frameworks - FFIEC, DORA, NIST-CSF, 800-53, COBIT, CCM etc is expected
Collaborative
Ability to influence, obtain buy in and drive implementation of decisions
Strategic mindset linking multiple aspects and initiatives to drive a wholistic view of the risk and control environment
Excellent Communication skills
Leading and developing team
Being an effective mentor and coach
Ability to be a strong voice for review and challenge while continuing to maintain positive relationships with business stakeholders
An ability to be a leader within their team, as well as be a leader amongst your peers

Nice To Haves

Thought leadership around technology risks a must
CRISC, CISSP, TOGAF, CCSK is appreciated but not mandatory
Experience with Cyber and Information Security, Cloud Risk Management (AWS, Azure), Enterprise Architecture is a plus.

Responsibilities

Ensuring technology risks and non-compliance with internal and external standards are proactively identified, prudently managed, and effectively challenged
Identifying/assessing/monitoring risks and supporting FLOD in planning/executing controls and additional compensating controls
Participating in various risk governance forums and executing real time oversight and challenge
Monitoring technology risk appetite, reporting breaches, escalating exceptions and challenging risk acceptances
Providing an independent opinion on FLOD Technology risk management, recommending appropriate improvements
Participate in the adoption of the Enterprise Technology Risk Framework for technology processes
Interacting with the Enterprise Process Owners for the Technology Processes and foster deeper and integrated FLOD/SLOD relationships and embedded risk management
Communicate and drive effective implementation of ETRM risk management policies, framework, tools, guidelines and standards across the business ensuring technology risks are identified and managed effectively.
Provide strategic leadership, vision and on-going support to the First line of Defense (FLOD) and IT leaders regarding information technology best practices and trends
Advise IT and FLOD in prioritization of risks, risk initiatives, risk mitigation alternatives
Review and appropriately challenge technology risk decisions, direction, and initiatives under taken by the FLOD providing an independent voice to the risk management process
Provide support and advise to ETRM and your stakeholders for regulatory exams and regulatory findings
Collaborate with and support regional (APAC and EMEA ETRM) peers in matters related to technology risks
Deliver assigned ETRM services annual book of work (risk assessments, continuous monitoring, issues management, reporting etc) through the established risk leads within the team and engaging the ETRM India Service Center of Excellence
Utilize available Enterprise Risk and Operational risk management tools (NBPRA, MRI, RCSA, KRI’s, Incident data, Loss event data) in conjunction with other environmental changes to proactively monitor the Technology control environment and identify and address potential weaknesses and/or gaps in a timely manner
Keep abreast of new products, services, technologies and applications as well as their respective impact on the organization’s risk profile
Serve as a subject matter expert in technology risk, controls, compliance, best practices