SVP, Head of Corporate Audit for Information Technology

State Street•Boston, MA

5d•$225,000 - $337,500•Onsite

About The Position

The Senior Vice President and Head of Corporate Audit for Information Technology is a leadership role within Corporate Audit and reports directly to the General Auditor. The role establishes, directs, and executes Corporate Audit’s strategy for Global Technology Services and contributes to the global Corporate Audit strategy and methodology as a member of the Corporate Audit Management Committee. It leads the infrastructure, cyber, and horizontal IT audit functions and is based in the Boston office four days a week. The role independently assesses the effectiveness of the internal control environment, advises on risk management, and supports a culture of risk excellence. The leader sets global IT audit coverage strategy; leads and develops a diverse global team; builds continuous auditing capabilities, including data analytics; advises the General Auditor and the Board’s E&A Committee on technology risks; and maintains relationships with senior stakeholders, regulators, and governance committees. The position also communicates and tracks audit findings and recommendations, applies technology risk and controls frameworks such as NIST, and drives transformation and continuous improvement in audit practices. The successful candidate will bring extensive technology risk, cyber, IT audit, and assurance leadership experience in large global financial services environments. They will demonstrate executive- and board-level communication, strategic and operational leadership, risk management expertise, and the ability to lead global teams in a highly regulated environment. A bachelor’s degree in a relevant field and a related professional certification are required; a master’s degree is preferred.

Requirements

At least 20 years of experience in infrastructure, cyber, IT risk management, or consulting, including at least 10 years in IT audit or assurance leadership roles.
At least 15 years of corporate audit experience in a large, global financial services firm.
At least 10 years of experience leading global teams with board-facing responsibilities.
Expert knowledge of audit industry practices and professional standards.
Strong risk management experience and expert skill in recognizing and assessing risk.
Exceptional leadership, strategic planning, and communication skills, including experience presenting to senior executives and the board.
Ability to manage complex programs in a fast-paced, highly regulated environment and deliver impactful results.
Bachelor’s degree in Information Technology, Computer Science, or a related field.
Professional certification in a related field, such as CISSP, CISA, or CISM.
Demonstrated understanding of technology risk management, qualitative and quantitative assessments, IT and data processes and controls, industry standards, frameworks, and emerging risks.
Expertise in evaluating cybersecurity, cyber resiliency, and cyber maturity and developing effective audit coverage strategies.
Strong knowledge of cyber and cloud technologies and tools, and ability to assess associated risks, including data-driven monitoring and penetration test approaches.
Strong executive- and board-level interpersonal and communication skills, including ability to translate technology risk into business terminology.
Expertise in developing relationships with board members, senior executives, management, and team members.
Strong execution skills and experience leading a global team in large-scale project management.
Highly organized, with analytical, problem-solving, influencing, and negotiation skills.

Nice To Haves

Master’s degree preferred.
Thought leadership in AI and emerging technologies.

Responsibilities

Set global strategy for IT infrastructure, cyber, and business IT risk coverage and audits.
Build and sustain a high-performing organization, developing leaders and technical experts and fostering succession readiness, accountability, and excellence.
Build continuous auditing processes, including use of data analytics.
Collaborate with global peers on business and legal entity audits.
Advise the General Auditor and the E&A Committee of the Board on technology risks.
Maintain stakeholder relationships across the organization, including with the CIO, CISO, CTO, and other senior leaders.
Manage and develop a diverse global team of auditors providing assurance and advice on technology risks, including cyber risks and threats.
Ensure the IT audit function is integrated with the overall audit program.
Communicate audit findings and recommendations to the bank’s leadership team.
Monitor and track progress on audit findings and recommendations.
Serve as a subject matter expert on technology risk and controls frameworks, including NIST, and apply them in audit work.
Develop working relationships with regulators and communicate audit strategy and results.
Participate as an active non-voting member of governance and risk committees and management steering committees, encouraging balanced discussion, challenge, and debate.
Establish working partnerships with peers while leading business and legal entity audits globally.
Promote cross-cultural awareness and a collaborative, inclusive global work environment.
Drive transformation and continuous improvement in Corporate Audit practices, processes, and operations.

Benefits

401(k) retirement savings plan with company match.
Insurance coverage including basic life, medical, dental, vision, and long-term disability, with other optional coverages.
Paid time off, including vacation, sick leave, short-term disability, and family care responsibilities.
Access to an Employee Assistance Program.
Incentive compensation, including eligibility for annual performance-based awards, with exclusions for certain sales roles.
Eligibility for certain tax-advantaged savings plans.
Inclusive development opportunities.
Flexible work-life support.
Paid volunteer days.
Employee networks.