AVP, ICT Risk Governance & Oversight (DORA-Driven)

State Street; Poland; Hybrid; PLN 164,000 - 200,000; Full time

Benefits offered by this job

Permanent contract from day one

Birthday/anniversary holidays

Gold Medical Package

Premium life insurance

Job summary

State Street seeks an ICT Risk Governance & Oversight AVP to support the independent oversight, governance, challenge and reporting of ICT risks across SSBI. You will operate in the Second Line of Defense to strengthen the risk framework and regulatory compliance.

The role emphasizes risk assessment, governance reporting and escalation of ICT risk concerns, with collaboration across risk and technology teams in a multinational setting.

Qualifications

• 4–8 years of ICT Risk Management, Operational Risk or related experience.
• Experience in financial services or regulated industries preferred.
• Bachelor’s or Master’s degree in Risk Management, IT, Information Security, Finance or related field.
• Good awareness of EBA ICT and security risk management guidelines and outsourcing expectations.
• Certifications such as CRISC, CISA, CISM, CISSP or ISO27001 Lead Auditor preferred.
• Demonstrated experience may be accepted in lieu of formal certification.

Responsibilities

• Maintain and continuously enhance the SSBI ICT Risk Management Framework in line with DORA and resilience requirements.
• Prepare materials and analysis for ICT governance committees and senior management reporting.
• Perform independent review and challenge of ICT risk assessments, control evaluations and risk acceptance decisions.
• Escalate ICT risk concerns and propose mitigations to ICT Risk Manager and ORM leadership.
• Support the development and reporting of ICT risk appetite metrics, thresholds and KRIs.
• Produce risk reporting and trend analyses for regulatory demonstrations of ICT risk governance.

Skills

Analytical skills

Regulatory risk

DORA knowledge

Stakeholder mgmt

Communication

Education

Bachelor's or Master's in Risk/IT

Tools

CRISC

CISA

CISM

ISO27001 Lead Auditor

Job description

State Street seeks an ICT Risk Governance & Oversight AVP to support the independent oversight, governance, challenge and reporting of ICT risks across SSBI. You will operate in the Second Line of Defense to strengthen the risk framework and regulatory compliance.

The role emphasizes risk assessment, governance reporting and escalation of ICT risk concerns, with collaboration across risk and technology teams in a multinational setting.