Vice President, Legal Operations - Third Party Risk

State Street Corporation • Boston, MA

4d • $110,000 - $181,250

About The Position

Position Summary The Vice President, Legal Operations - Third Party Risk will lead the centralized oversight and management of risk and control functions across the Legal Department. This role will be responsible for ensuring compliance with Third Party Risk Management (TPRM) protocols, managing Information Security Risk Management Program (ISMRP) issues, coordinating audit deliverables, maintaining legal department policies, and overseeing access management. The VP will serve as a strategic partner to Legal Operations, Compliance, Cybersecurity, and other internal stakeholders to ensure the Legal Department meets regulatory, operational, and enterprise risk standards. Key Responsibilities Third Party Risk Management (TPRM): Own the end-to-end TPRM lifecycle for Legal vendors, including onboarding, inherent risk assessments, due diligence, issue remediation, and performance monitoring. Collaborate with TPRM Office to ensure timely submission of IRQs and DDQs, and escalate non-compliance or overdue items as needed. Maintain and enhance the Legal Department's TPRM procedures and ensure alignment with enterprise-wide standards. Information Security Risk Management (ISMRP): Manage ISMRP-related issues and coordinate with application owners and Information Security Officers to ensure adherence to the Global Information Security Risk Management Program. Track and remediate control gaps related to access provisioning, separation of duties, and IAM standards. Audit and Compliance: Serve as the primary liaison for Legal Operations audit deliverables, including coordination of remediation plans and documentation of control enhancements. Ensure audit readiness through centralized documentation, version control, and traceability of changes and approvals. Policy and Procedure Governance: Maintain and update the Legal Department's policy repository, ensuring policies are current, accessible, and aligned with enterprise standards. Partner with Corporate Policy Center to ensure global impact policies are properly classified and distributed. Access Management: Oversee access provisioning and deprovisioning for Legal applications, including ONIT and other platforms. Ensure compliance with IAM standards and maintain documentation of access certifications and role-based permissions. Reporting and Analytics: Develop and maintain risk dashboards using Power BI to provide visibility into vendor performance, aged issues, and compliance metrics. Present monthly updates to senior management and contribute to enterprise risk reporting frameworks.

Requirements

• Bachelor's degree in Business, Finance, Risk Management, or related field.
• 7+ years of experience in legal operations, risk management, compliance, or vendor oversight.
• Deep understanding of TPRM, ISMRP, audit protocols, and access management frameworks.
• Experience with RSA Archer, Power BI, and enterprise risk tools.
• Strong analytical, communication, and project management skills.
• Proven ability to collaborate across functions and manage competing priorities in a fast-paced environment.

Responsibilities

• Own the end-to-end TPRM lifecycle for Legal vendors, including onboarding, inherent risk assessments, due diligence, issue remediation, and performance monitoring.
• Collaborate with TPRM Office to ensure timely submission of IRQs and DDQs, and escalate non-compliance or overdue items as needed.
• Maintain and enhance the Legal Department's TPRM procedures and ensure alignment with enterprise-wide standards.
• Manage ISMRP-related issues and coordinate with application owners and Information Security Officers to ensure adherence to the Global Information Security Risk Management Program.
• Track and remediate control gaps related to access provisioning, separation of duties, and IAM standards.
• Serve as the primary liaison for Legal Operations audit deliverables, including coordination of remediation plans and documentation of control enhancements.
• Ensure audit readiness through centralized documentation, version control, and traceability of changes and approvals.
• Maintain and update the Legal Department's policy repository, ensuring policies are current, accessible, and aligned with enterprise standards.
• Partner with Corporate Policy Center to ensure global impact policies are properly classified and distributed.
• Oversee access provisioning and deprovisioning for Legal applications, including ONIT and other platforms.
• Ensure compliance with IAM standards and maintain documentation of access certifications and role-based permissions.
• Develop and maintain risk dashboards using Power BI to provide visibility into vendor performance, aged issues, and compliance metrics.
• Present monthly updates to senior management and contribute to enterprise risk reporting frameworks.

Benefits

• Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees