Technology & Cyber Risk, VP

State Street•Boston, MA

8d•$120,000 - $202,500

About The Position

State Street’s Enterprise Technology Risk Management (ETRM), part of Enterprise Risk Management and a Second Line of Defense function, provides independent oversight, monitoring, effective challenge, and guidance on technology and cybersecurity risk. The Vice President will serve as the primary technology risk partner and ETRM contact for the newly established Wealth Services business, coordinating hands-on cyber and technology risk oversight with Wealth Services Risk Management, business leaders, technology teams, and other risk partners. The role provides independent review and effective challenge of technology, cybersecurity, and resilience risks. It supports the development and maturation of Wealth Services’ risk oversight capabilities and helps identify, assess, monitor, escalate, and report risks as the business, its technology environment, and its risk profile evolve. The position also supports clear risk reporting to senior management, governance committees, and other stakeholders. The successful candidate will independently manage complex risk activities, communicate effectively with senior stakeholders, and translate technical issues into clear business, operational, regulatory, and client implications. Candidates may have experience in first-line Technology Risk, second-line risk oversight, or Technology Audit, provided they have direct experience assessing and challenging technology and cybersecurity risks.

Requirements

10+ years of progressive experience in Technology Risk, Cybersecurity Risk, Technology Audit, or a related risk and control function.
Demonstrated experience supporting a Wealth Management business and understanding its products, platforms, operations, technology environment, and risk considerations.
Strong experience identifying, assessing, monitoring, challenging, and reporting technology and cybersecurity risks.
Strong knowledge of technology and operational resilience, including assessing risks associated with technology environments and critical business services.
Working knowledge of IT General Controls (ITGCs), cybersecurity controls, risk assessments, issue management, and control frameworks; direct control-testing experience is not required.
Experience applying recognized technology and cybersecurity frameworks such as NIST, ISO 27000, COBIT, CSA Cloud Controls Matrix, ITIL, or comparable standards.
Experience developing and presenting technology and cybersecurity risk reporting to senior management, governance committees, or boards.
Ability to operate independently as a hands-on risk professional and serve as a primary point of contact for business, technology, cybersecurity, and risk stakeholders.
Ability to translate complex technical risks into clear business, operational, and risk implications for nontechnical stakeholders.
Strong communication, negotiation, presentation, judgment, and stakeholder-management skills.
Undergraduate degree in technology, information security, risk management, business, or a related discipline, or equivalent relevant professional experience.
Strong practical knowledge of Technology Risk and Cybersecurity Risk within a regulated financial-services environment.
Understanding of first- and second-line risk functions and independent, constructive challenge.
Ability to prioritize and escalate significant risks appropriately, influence senior stakeholders, and maintain productive relationships while providing effective challenge.
Experience working across global teams and diverse business environments.

Nice To Haves

Experience supporting regulatory examinations, regulatory responses, internal audits, or remediation initiatives.
Knowledge of AI adoption, AI governance, or AI risk management.
Experience with third-party/vendor risk assessments or M&A technology-risk due diligence.
Experience with GRC platforms, risk-data analytics, Tableau, or Power BI.
Professional certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CCSP, COBIT, or ITIL.

Responsibilities

Serve as the primary ETRM point of contact for Wealth Services and its Risk Management team.
Coordinate and manage technology and cybersecurity risk oversight activities across Wealth Services.
Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.
Conduct or oversee technology risk assessments, material risk identification, real-time risk oversight, issue monitoring, and risk reporting.
Evaluate risks arising from control gaps, control weaknesses, technology changes, and evolving business activities.
Assess the use and effectiveness of IT General Controls and cybersecurity controls; detailed control testing is not necessarily required.
Monitor technology risk exposure and establish appropriate escalation and reporting channels.
Prepare clear, timely technology and cybersecurity risk reporting for senior management, governance committees, and boards, as appropriate.
Partner with first-line Technology Risk, Cybersecurity, business, and technology teams to support timely risk identification and management.
Collaborate with ETRM and Enterprise Risk Management professionals to align with broader operational and enterprise risk programs.
Monitor emerging technology, cybersecurity, resilience, and regulatory risks affecting Wealth Management businesses.
Support regulatory examinations, audits, client engagements, and remediation activities, as needed.
Provide risk guidance related to new products, technology initiatives, platforms, vendors, clients, or transactions.
Promote risk awareness, constructive challenge, and accountability.

Benefits

401(k) retirement savings plan with company match.
Basic life, medical, dental, vision, long-term disability, and other optional insurance coverage.
Paid time off, including vacation and sick leave, and support for short-term disability and family care responsibilities.
Access to an Employee Assistance Program.
Eligibility for incentive compensation, including annual performance-based awards, subject to stated exclusions.
Eligibility for certain tax-advantaged savings plans.
Inclusive development opportunities.
Flexible work-life support.
Paid volunteer days.
Employee networks.