Technology & Cyber Risk Vice – Wealth Services, VP

Who We Are

Enterprise Technology Risk Management (ETRM) is part of State Street’s Enterprise Risk Management organization. As a Second Line of Defense function, ETRM provides independent oversight, monitoring, effective challenge, and guidance related to technology and cybersecurity risk.

##

Who We Are Looking For

We are seeking an experienced Cyber & Technology Risk Vice President to serve as the primary technology risk partner for State Street’s newly established Wealth Services business.

This is a hands-on role responsible for coordinating and managing cyber and technology risk oversight activities for Wealth Services. The successful candidate will work closely with Wealth Services Risk Management, business leaders, technology teams, and other risk partners to identify, assess, monitor, challenge, escalate, and report technology and cybersecurity risks.

The ideal candidate will bring more than 10 years of experience in Technology and Cybersecurity Risk, including experience within Wealth Management. Strong knowledge of technology and operational resilience is also important. Candidates may come from first-line Technology Risk, second-line risk oversight, or Technology Audit, provided they have direct experience assessing and challenging technology and cybersecurity risks.

This role requires someone who can independently manage complex risk activities, communicate effectively with senior stakeholders, and translate technical issues into clear business and risk implications.

##

Why This Role Is Important to Us

Wealth Services is a new strategic business for State Street. This newly created role offers the opportunity to help establish and mature its cyber and technology risk oversight capabilities as the business, technology environment, and risk profile continue to develop.

As the primary ETRM contact for Wealth Services, the successful candidate will provide independent oversight and effective challenge while helping the business identify and manage technology, cybersecurity, and resilience risks. The role will also support clear risk reporting to senior management, governance committees, and other stakeholders.

##

What You Will Be Responsible For

As Cyber & Technology Risk, Vice President – Wealth Services, you will:

• Serve as the primary ETRM point of contact for the Wealth Services business and its Risk Management team.

• Coordinate and manage technology and cybersecurity risk oversight activities across Wealth Services.

• Provide independent review and effective challenge of technology, cybersecurity, and resilience risks.

• Conduct or oversee technology risk assessments, material risk identification, real-time risk oversight, issue monitoring, and risk reporting.

• Evaluate technology and cybersecurity risks arising from control gaps, control weaknesses, technology changes, and evolving business activities.

• Assess the use and effectiveness of IT General Controls and cybersecurity controls without necessarily performing detailed control testing.

• Monitor technology risk exposure and establish appropriate escalation and reporting channels.

• Prepare clear, timely technology and cybersecurity risk reporting for senior management, governance committees, and boards, as appropriate.

• Partner with first-line Technology Risk, Cybersecurity, business, and technology teams to support timely identification and management of risk.

• Collaborate with other ETRM and Enterprise Risk Management professionals to promote alignment with broader operational and enterprise risk programs.

• Monitor emerging technology, cybersecurity, resilience, and regulatory risks affecting Wealth Management businesses.

• Support regulatory examinations, audits, client engagements, and remediation activities, as needed.

• Provide risk guidance related to new products, technology initiatives, platforms, vendors, clients, or transactions.

• Promote a strong culture of risk awareness, constructive challenge, and accountability.

##

What We Value

• Strong practical knowledge of Technology Risk and Cybersecurity Risk within a regulated financial-services environment.

• The ability to work independently and take direct ownership of complex risk activities and deliverables.

• A clear understanding of the role of first- and second-line risk functions and the importance of independent, constructive challenge.

• Strong knowledge of technology and operational resilience.

• The ability to translate technical risks into clear business, operational, regulatory, and client implications.

• Strong judgment and the ability to prioritize and escalate significant risks appropriately.

• The credibility to influence senior business, technology, cybersecurity, and risk stakeholders.

• Strong communication, negotiation, presentation, and relationship-management skills.

• The ability to maintain productive stakeholder relationships while providing effective challenge.

• Experience working across global teams and diverse business environments.

##

Qualifications

• 10+ years of progressive experience in Technology Risk, Cybersecurity Risk, Technology Audit, or a related risk and control function, ideally within financial services or another highly regulated environment.

• Demonstrated experience supporting a Wealth Management business, with an understanding of its products, platforms, operations, technology environment, and risk considerations.

• Strong experience identifying, assessing, monitoring, challenging, and reporting technology and cybersecurity risks.

• Strong knowledge of technology and operational resilience, including the ability to assess risks associated with technology environments and critical business services.

• Working knowledge of IT General Controls (ITGCs), cybersecurity controls, risk assessments, issue management, and control frameworks. Direct control-testing experience is not required.

• Experience applying recognized technology and cybersecurity frameworks such as NIST, ISO 27000, COBIT, CSA Cloud Controls Matrix, ITIL, or comparable standards.

• Experience developing and presenting technology and cybersecurity risk reporting to senior management, governance committees, or boards.

• Demonstrated ability to operate independently as a hands-on risk professional and serve as a primary point of contact for business, technology, cybersecurity, and risk stakeholders.

• Ability to translate complex technical risks into clear business, operational, and risk implications for nontechnical stakeholders.

• Strong communication, negotiation, presentation, judgment, and stakeholder-management skills.

• Undergraduate degree in technology, information security, risk management, business, or a related discipline, or equivalent relevant professional experience.

• Experience supporting regulatory examinations, regulatory responses, internal audits, or remediation initiatives is a plus.

• Knowledge of AI adoption, AI governance, or AI risk management is a plus.

• Experience with third-party/vendor risk assessments or M&A technology-risk due diligence is a plus.

• Experience with GRC platforms, risk-data analytics, Tableau, or Power BI is a plus.

• Professional certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CCSP, COBIT, or ITIL are a plus.

##

Are You the Right Candidate?

We recognize that successful candidates bring different combinations of experience and expertise. If you have strong Technology and Cybersecurity Risk experience, understand the Wealth Management environment, and can provide credible, practical risk oversight and challenge, we encourage you to apply.

Salary Range

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: o